Alibaba Group's developer tools were targeted in a software supply chain attack via malicious npm packages impersonating private @ali-scoped packages. The attack aimed at Chinese-speaking developers and used a cross-platform RAT for industrial espionage.