The assembly line behind 1.5 million malicious domains

Developer-targeting campaign using malicious Next.js repositories