This is a heavily interactive web application, and JavaScript is required. Simple HTML interfaces are possible, but that is not what this is.
Post
Socket
socket.dev
did:plc:n6f3j47vjucu5ijwdmow7n2w
A fake corepack site at corepack[.]org is impersonating the Node.js Corepack tool and pushing malware to developers.
The download button drops an infostealer that steals browser data and SSH keys, plus proxyware that turns your machine into a proxy node.
https://socket.dev/blog/fake-corepack-site-distributes-infostealer-and-proxyware
2026-07-24T18:30:38.581Z