Software
a hacked github account just turned npm into a credential-stealing worm
One compromised maintainer account, ten trojanized packages, two billion downloads a month — and the malware is specifically hunting for your Claude and Cursor configs.
Priya Nair · Aug 9 · 6 min