NPM flooded with malicious packages downloaded more than 86,000 times
Ars Technica
NPM flooded with malicious packages downloaded more than 86,000 times
Packages downloaded from NPM can fetch dependencies from untrusted sites.