A malicious npm package has been discovered that hides a multi-stage windows remote access trojan (RAT). The package is reportedly disguised as a postcss tool, although some outlets are also discussing other types of cyber threats, including wordpress plugin backdoors and chrome extension keyloggers. It is unclear if these are all related incidents or separate attacks.