Socket<p>📌 New from the Socket Research Team: A malicious npm package disguised as an <a href="https://fosstodon.org/tags/Advcash" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>Advcash</span></a> integration triggers a reverse shell during payment success. Unlike many malicious packages that execute code during installation, this payload is delayed until runtime. </p><p><a href="https://socket.dev/blog/npm-package-advcash-integration-triggers-reverse-shell" rel="nofollow noopener noreferrer" translate="no" target="_blank"><span class="invisible">https://</span><span class="ellipsis">socket.dev/blog/npm-package-ad</span><span class="invisible">vcash-integration-triggers-reverse-shell</span></a> <a href="https://fosstodon.org/tags/JavaScript" class="mention hashtag" rel="nofollow noopener noreferrer" target="_blank">#<span>JavaScript</span></a></p>