npm

Unknown attackers have compromised several popular npm packages in a supply-chain attack.

New malicious campaign hunts for Discord tokens and credit card information via infected npm packages.