The npm incident frightened everyone, but ended up being nothing to fret about

Disaster was averted after widely used open-source packages were compromised via social engineering.

First seen on cyberscoop.com

Jump to article: cyberscoop.com/open-source-npm-package-attack/