Compromised JavaScript Package Caught Stealing npm Credentials July 12, 2018 https://www.bleepingcomputer.com/ne...ript-package-caught-stealing-npm-credentials/