A credential-stealing worm hidden in more than 400 compromised npm packages automatically spread across software ecosystems ...

A massive supply chain attack on the Node Package Manager (npm) registry has infected over 400 packages with over 2 billion downloads with the ...