Popular NPM library hijacked to install password-stealers, minersbleepingcomputer.com·9 pts·j_autumn·3