A fake corepack site at corepack[.]org is impersonating the Node.js Corepack tool and pushing malware to developers. The download button drops an infostealer that steals browser data and SSH keys, plus proxyware that turns your machine into a proxy node. https://socket.dev/blog/fake-corepack-site-distributes-infostealer-and-proxyware