1 story taggedcredential stealing.
A worm targeting npm packages has affected hundreds of software components, raising security concerns for developers.