Sonatype NPM event-stream 3 distributing a malicious package
blog.sonatype.com