Popular JavaScript libraries eslint-config-prettier and eslint-plugin-prettier were hijacked this week and turned into malware droppers, in a supply chain attack achieved via targeted phishing and ...

Hundreds of code libraries posted to NPM try to install malware on dev machines These are not the the developer tools you think they are.