Every time a developer types npm install, they are placing a bet that the package they are pulling into their project is not ...

A previously undocumented .NET trojan and its companion Pheno plugin allow attackers to capture mobile authentication codes ...