A new supply chain attack targeting the Node Package Manager (npm) ecosystem is stealing developer credentials and attempting to spread through packages published from compromised accounts.

Cybersecurity researchers have flagged a fresh set of packages that have been compromised by bad actors to deliver a ...