Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised(socket.dev)
1182 points by jamesberthoty | 965 comments
StepSecurity blog post reporting that @ctrl/tinycolor and 40+ npm packages were compromised by self-propagating malware that steals cloud credentials.
