Popular NPM library hijacked to install password-stealers, minersbleepingcomputer.com11 pointsbryan05 years ago