NPM flooded with malicious packages downloaded more than 86k times(arstechnica.com)
349 points by jnord | 248 comments
Ars Technica article on the PhantomRaven campaign, in which malicious NPM packages that fetch dependencies from untrusted sites were downloaded over 86,000 times.