Apr 23, 2026Apr 23, 2026 · 16 min read · 472 viewsFrom a coffee-in-bed Google search to a StealC-linked campaign — the story behind nailproxy.spaceHow 19 fake GitHub repositories across 17 accounts led from a Python dropper to a StealC-linked payload chain.16 min read · 472 views