17-10-2020 09:00 via zdnet.com

Three npm packages found opening shells on Linux, Windows systems

NPM staff: Any computer that has this package installed or running should be considered fully compromised.
Read more »