Multiple @immobiliarelabs Backstage Plugins Compromised on npm

Multiple Immobiliare Labs Backstage plugins on npm were compromised with a sophisticated supply chain attack that steals a wide range of credentials and persists in AI coding assistant configs by executing a malicious payload during package installation using a novel node-gyp binding.gyp hook.