Two malicious packages were discovered on npm (Node package manager) that covertly patch legitimate, locally installed packages to inject a persistent reverse shell backdoor.

Today's hint is for those of you who, like me, use Terminal often and occasionally have a need to do things there as the root user. If you don't know what Terminal is, don't know what the root user is ...