Malicious NPM packages pretending to be Roblox libraries are delivering ransomware and password-stealing trojans on unsuspecting users.

Redline stealer is also popular among the password-stealer attackers because it's cheap for would-be criminals to acquire, easy to use and has been available since 2020.