Four JavaScript npm packages contained malicious code that collected user details and uploaded the information to a public GitHub page. According to Sonatype security researcher Ax Sharma, the four ...