Roblox Developers Targeted with npm Packages Infected with Skuld and Blank-Grabber

The incident shows how threat actors exploit trust and human error in the open-source ecosystem, using readily available malware, platforms like GitHub, and communication channels like Discord and Telegram to bypass traditional security measures.