Open source package with 1M monthly downloads stole user credentials #1 Post by aureliusm » Tue, Apr 28, 2026, 10:30 AM UTC Open source package with 1M monthly downloads stole user credentialsarstechnica.com