Wormable npm attack returns as 25,000 repos spill secrets
go.theregister.com
: Trojanized npm packages spread new variant that executes in pre-install phase, hitting thousands within days