Fortinet warns Stealit malware uses Node.js SEA and fake installers to deliver stealers, RATs, and persistence.
Researchers map a campaign that escalated from a Python infostealer to a full PureRAT backdoor — loaders, evasions, and ...
Right now any scoop applications that use .cmd or .ps1 files to start get a shell shim (without extension) so things work with Cygwin and WSL. That works great.