Malware found in NPM packages with 1 million weekly downloads

RVTools hit in supply chain attack to deliver Bumblebee malware

Supply chain attack hits npm package with 45,000 weekly downloads

GitHub Action hack likely led to another in cascading supply chain attack