security: Developer-targeting campaign using malicious Next.js repositories

Microsoft has reported a concerning developer-targeting campaign leveraging malicious Next.js repositories for covert remote code execution and command-and-control activities through standard build workflows.