Hackers booby trap NPM with cross-language imposter packages | CSO Online
Developers adept at multiple coding languages are tricked into installing a familiar-sounding package from within the Node Package Manager registry instead of the original source.| CSO Online
