A cryptocurrency thief got into the npm account of a hard-working developer via spearphishing. node.js packages with billions ...

The malware was found in 18 npm packages that together are usually downloaded over 2 billion times per week. But the security community was quick to act.