Security News Thousands Download Malicious npm Libraries Impersonating Legitimate Tools TheHackerNews Daniel Bender 19 Dec 2024 Fake npm packages @typescript_eslinter/eslint and types-node exploit typosquatting to drop trojans, risking software supply chains.