Destructive malware available in NPM repo went unnoticed for 2 years

[arstechnica@mastodon.social]

Destructive malware available in NPM repo went unnoticed for 2 years
Payloads were set to spontaneously detonate on specific dates with no warning.
https://arstechnica.com/information-technology/2025/05/destructive-malware-available-in-npm-repo-went-unnoticed-for-2-years/?utm_brand=arstechnica&utm_social-type=owned&utm_source=mastodon&utm_medium=social