Software
a hacked github account just turned npm into a credential-stealing worm
One compromised maintainer account, ten trojanized packages, two billion downloads a month — and the malware is specifically hunting for your Claude and Cursor configs.
Priya Nair · 1h ago · 6 min