Ars Technica NewsOct 30
NPM flooded with malicious packages downloaded more than 86,000 times https://arstechni.ca/ej86 #codedependencies #coderepositories #phantomraven #Security #Biz&IT #npm
NPM flooded with malicious packages downloaded more than 86,000 times

Packages downloaded from NPM can fetch dependencies from untrusted sites.

Ars Technica