Cybersecurity researchers discovered 18 malicious npm packages targeting users of Alibaba developer tools with a cross-platform RAT. The campaign uses a multi-layer dependency tree attack: top-layer lure packages impersonate private @ali-scoped Alibaba packages, a middle-layer bridge package ('smart-config-manager') connects them to low-layer packages containing loader logic. The loader fetches a remote JavaScript payload via curl. A low-layer package contacts a GitHub repository to retrieve a rule engine configuration, which then uses Node.js's vm module to execute a malicious payload that contacts a remote server for secondary malware. The payload is retrieved from a domain masquerading as Alibaba ('aone-cli-next.oss-cn-beijing.aliyuncs[.]com'). Platform-specific behaviors: On Windows, it terminates Alilang (enterprise security/VPN/office app) and replaces its core code with a trojanized version; On Linux, it downloads a binary to /tmp, runs it as a detached process, then deletes it from disk after loading into memory; On macOS, it inserts a malicious script into ~/.zshrc and sets up a 10-minute Launch Agent. The final payload is a complex backdoor with command execution, arbitrary file upload/download, host reconnaissance, payload staging, and lateral movement capabilities. It persists by injecting malicious code into enterprise collaboration apps like DingTalk, Wukong, and Qoder. Chinese language comments in source code and GitHub commit timestamps at UTC+08:00 suggest a Chinese-speaking threat actor. The campaign goal appears to be industrial espionage. A secondary incident involves a poisoned PyPI package 'mrmustard' (v0.7.4) that steals SSH private keys, AWS credentials, Kubernetes configurations, SLURM job queues, and GPU inventories, exfiltrating them to 'metrics.femboy[.]energy'. The mrmustard compromise was achieved by breaching the maintainer's GitHub account via self-hosted CI runners and exfiltrating publishing secrets to a webhook.site URL. The malware installed three separate persistence mechanisms that survive package uninstallation.