AsyncAPI npm packages infected with credential-stealing malware

USB worm spreads crypto-stealing malware via Windows shortcut files

GitHub disables Microsoft repos pushing password-stealing malware

Red Hat npm Packages Compromised to Spread a Credential-Stealing Worm