Top npm package backdoored to drop dirty RAT on dev machines
go.theregister.com
: Hijacked maintainer account let attackers slip cross-platform trojan into 100M-downloads-a-week Axios