Ten malicious packages mimicking legitimate software projects in the npm registry download an information-stealing component ...
For the past four months, over 130 malicious NPM packages deploying information stealers have been collectively downloaded ...