Security News Thousands Download Malicious npm Libraries Impersonating Legitimate Tools TheHackerNews Daniel Bender Dec 19, 2024 Fake npm packages @typescript_eslinter/eslint and types-node exploit typosquatting to drop trojans, risking software supply chains.