Malware-laden packages increasingly found in repositories like NPM
arstechnica.com