Exploiting dev infrastructure is insanely easy: Analysis of the npm exploit
medium.com