Popular NPM library hijacked to install password-stealers, minersbleepingcomputer.com9 pointsj_autumn5 years ago