for those who might like a citable news article about the SANDWORM_MODE exploit, including the information summarized in the AI-generated summary screen-shotted in the OP, there's https://thehackernews.com/2026/02/malicious-npm-packages-harvest-crypto.html among others.
