A malicious npm package disguised as a math solver has been discovered using an encrypted loader and a complex trigger matrix to execute a remote access payload. Researchers have detailed the full attack chain and provided comprehensive indicators of compromise to help security teams detect and mitigate the threat.