NPM package caught using QR Code to fetch cookie-stealing malware

Show HN: Tips to stay safe from NPM supply chain attacks

Oh no, not again a meditation on NPM supply chain attacks

Which NPM package has the largest version number?