1 story taggedOtterCookie.
Fake coding tests planted a four-stage stealer on developers' machines, with the payload smuggled inside SVG picture files.