Skuld Infostealer Returns to npm with Fake Windows Utilities and Malicious Solara Development Packages

The threat actor, identified as “k303903” on npm registry, disguised malicious packages — windows-confirm, windows-version-check, downloadsolara, and solara-config — as legitimate tools.