JFrog found malicious npm packages that deploy a Windows RAT to steal Chrome credentials, run commands, and transfer files.
NotebookLM is great, but its ties to Google are less so. Open Notebook could be the alternative you've been looking for.