Threatline

Huge NPM Supply-Chain Attack Goes Out with Whimper

Threat actors phished Qix's NPM account, then used their access to publish poisoned versions of 18 popular open-source packages accounting for more than 2 billion weekly downloads.