Security News Malware Injected into 6 npm Packages After Maintainer Tokens Stolen in Phishing Attack TheHackerNews Daniel Bender Jul 20, 2025 npm packages hit by phishing-based supply chain attack, exposing developers to malware and remote access threats.