Macs under attack from malware impersonating popular password managers — how to stay safe

A new malware campaign is impersonating popular password managers to steal sensitive personal data from Mac users.

GitHub moves to tighten npm security amid phishing, malware plague

GitHub, which owns the npm registry for JavaScript packages, says it is tightening security in response to recent attacks.