The two exploited NPM packages, both uploaded in July, are: colortoolsv2. mimelib2. The dangerous code allowed the malware to evade security detection and ask for the next-stage p ...

Experts say a prominent developer was phished. The attack requires user interaction to succeed. Still, cybersecurity experts ...