Related:

Shai-Hulud malware attack: Tinycolor and over 40 NPM packages compromised

https://news.ycombinator.com/item?id=45260741