NPM package ‘is’ with 2.8M weekly downloads infected devs with malware

npm 'accidentally' removes Stylus package, breaks builds and pipelines

Popular npm linter packages hijacked via phishing to drop malware

Arch Linux AUR Packages For Firefox & Other Browsers Removed For Containing Malware