Malicious NPM Package Steals Chrome Passwords on Windows via ChromePass Recovery Tool

The malware listens for incoming connections from C2 servers and provides screen and camera access, directory listing, file lookup, file upload, shell command execution, and other capabilities.