Lookalike npm Package Hides a Multi-Stage Windows RAT

JFrog found an npm package impersonating postcss-selector-parser to drop a multi-stage Windows RAT