Security & Privacy
Fairwords NPM Worm Steals Credentials, Hijacks Your Other Packages, and Jumps to PyPI
Hackers turned three obscure NPM packages into a credential-stealing monster that doesn't stop at theft—it bumps versions in your other packages and leaps to PyPI. Developers: check your tokens yesterday.