The Digital Wiretap: Unpacking the npm Package That Just Wanted Your GitHub Keys
Massive Software Supply Chain Attack Compromises Packages With Billions of Downloads