Color NPM Package Compromised

NPM package ‘is’ with 2.8M weekly downloads infected devs with malware

Supply chain attack hits npm package with 45,000 weekly downloads

NPM package is-even has over 140k weekly downloads