Security News Four Malicious npm Packages Deliver Infostealers and Phantom Bot DDoS Malware TheHackerNews Daniel Bender 18 May 2026 Share 4 malicious npm packages with 3,006 downloads spread stealers and Phantom Bot, forcing removals and secret rotation.
