Hundreds of code libraries posted to NPM try to install malware on dev machines These are not the the developer tools you think they are.

Microsoft said its Visual Studio Code 1.7 release overloaded the npmjs.org JavaScript package management service for Node.js, forcing a version rollback to 1.6.1.