Shai-Hulud Returns: Over 300 NPM Packages Infected

Security Researchers Spot 150,000 Function-less npm Packages in Automated 'Token Farming' Scheme

Crims poison 150K+ npm packages with token-farming malware

Self-Replicating Worm Affected Several Hundred NPM Packages, Including CrowdStrike's