Somebody Tried to Hide a Backdoor in a Popular JavaScript NPM Package
bleepingcomputer.com