Fake npm Website Used to Push Malware via Stolen Token

Fake npm website used in phishing attack to steal maintainer token, leading to malware in popular JavaScript packages like eslint-config-prettier.

First seen on hackread.com

Jump to article: hackread.com/fake-npm-website-used-push-malware-via-stolen-token/