Inside a Mass Dependency Confusion Campaign: The Story of mr.4nd3r50n and the Silent postinstall

In the software supply chain ecosystem, some threats arrive not with a system crash, but with a quiet initialization script. A coordinated…