According to Koi Security, a legitimate-looking developer managed to slip in rogue code within an npm package called " ...
Microsoft-owned repository GitHub has responded to recent node package manager (npm) attacks such as the Shai-Hulud ...