From Dev.to
Inside a Trojanized Next.js Project: BeaverTail, InvisibleFerret, and a Hidden TsunamiKit Loader
Technical malware analysis · 30 October 2026 A seemingly ordinary Next.js memory game led to a multi-stage infection built around JavaScript, a private Python runtime, a remote-access backdoor, and an...