This week's malware skipped the phishing link. It rode in through `npm install` and shared AI chat links, the doors you never think to question. One crew faked 370M npm downloads with a farm of repos until the counter read "trusted". Another served stealers straight off real claude.ai and ChatGPT links. We ran both platforms through our own API in Reputation Radar #12. https://www.reput.io/blog/reputation-radar-12 #ThreatIntel #SupplyChainSecurity #SOC