JSCRAMBLER NPM PACKAGE BACKDOORED WITH MALWARE

Security firm Jscrambler disclosed that attackers published a malicious version of its npm package, which was downloaded nearly 1,500 times before detection. The compromised package contained infostealer malware targeting developer systems.