Fake VS Code Extension on NPM Spreads Multi-Stage Malware

My failed attempt to shrink all NPM packages by 5%

Snyk security researcher deploys malicious NPM packages targeting cursor.com

70% of new NPM packages in last 6 months were spam