I also checked out several open source Java projects ... Figure 3. This is NetBeans working with the code for the Neo4j graph database. Notice the extensive functionality in the context menu ...

It would scan the victim's workstation for a local NetBeans IDE installation, and proceed to burrow into the developer's other Java projects. The malware, which can run on Windows, macOS ...