Attack on NPM hits thousands of developers worldwide

Israeli security researchers identified a malicious spyware campaign in the NPM ecosystem that remained hidden from most security tools. The campaign managed to reach more than 86,000 developers.