Synthèse
Modified package published to npm, containing malware that exfiltrates private key material
Source originale
github.com