JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.
Deltarune Chapter 5 is subtitled Festival Day. It is the first entry in the series to offer more than one real ending. Every chapter before it funneled players into the exact same closing cutscene.