The NPM JavaScript registry has experienced a jump in malware, including packages related to data theft, crypto mining, botnets, and remote code execution, according to security company WhiteSource.
Regtech firm SlowMist noted that recently, the NPM ecosystem experienced another large-scale package poisoning incident.