A sophisticated malicious package discovered on Maven Central exploits typosquatting by using the org.fasterxml.jackson.core namespace to impersonate the legitimate Jackson JSON library published under com.fasterxml.jackson.core. aikido The malware implements a multi-stage payload with encrypted configuration strings, remote command-and-control infrastructure, and platform-specific executable delivery.