Version 5.8.3 hides a base64-encoded, XOR-obfuscated payload inside a file dressed up as a manifest-cache reader; 5.8.2 is clean. On install — and again on import — it unpacks an 83 KB bundle and grabs everything worth stealing: .npmrc and .env files; AWS, GCP and Azure credentials; SSH keys, kubeconfigs and Vault secrets; crypto wallets; even local AI-agent configs. The haul leaves encrypted, bound for a lookalike domain, ci-artifacts.dev. The clever part is the GitHub move. Using a stolen token, the payload pushes a branch with a codeql_analysis.yml workflow that dumps your secrets into a build artifact, and spoofs the commit author as github-advanced-security[bot] so it reads like a routine scan. It also drops a reverse shell that beacons back to the same host. If a CI runner or a laptop pulled 5.8.3, treat every credential it could reach as burned — rotate first, then comb recent Actions runs for that fake workflow.