Hackers drop 60 npm bombs in less than two weeks to recon dev machines – CSO Online
Threat actors have likely made off with sensitive host and network information from developers’ systems in a coordinated malware campaign, involving 60 malicious npm packages, that were live for just…