Having another security threat emanating from Node.js’ Node Package Manager (NPM) feels like a weekly event at this point, ...
Researchers outline how the PhantomRaven campaign exploits hole in npm to enable software supply chain attacks.