"Each published package becomes a new distribution vector: as soon as someone installs it, the worm executes, replicates, and ...

Halud, is compromising hundreds of NPM packages, spreading self-replicating malware, exfiltrating data, and turning private ...