GoKawiil
AsyncAPI npm packages infected with credential-stealing malware
(bleepingcomputer.com)
1.
2.
AsyncAPI npm packages infected with credential-stealing malware
(bleepingcomputer.com)
3.
SHA1-Hulud the Second Comming – Postman, Zapier, PostHog All Compromised via NPM
(news.ycombinator.com)