Security News Malicious npm package using steganography downloaded by hundreds BleepingComputer Daniel Bender 15 May 2025 A malicious package in the Node Package Manager index uses invisible Unicode characters to hide malicious code and Google Calendar links to host the URL for the command-and-control location.
