October 24, 2021 Node poisoning: hijacked package delivers coin miner and credential-stealing backdoor A hacked NPM account was used to deliver Linux and Windows Monero miners and Windows credential-stealing malware along with a popular node.js library. SophosLabs UncutThreat Research
