npm Supply Chain Attack Exposes Devs to “Scavenger” Malware Via Phished Accounts
A major incident has rocked the npm ecosystem: the widely-used package eslint-config-prettier suddenly received an update devoid of any corresponding changes on GitHub. Developers quickly grew suspicious—and with good reason. The package’s maintainer later...
