Regtech firm SlowMist noted that recently, the NPM ecosystem experienced another large-scale package poisoning incident.
The NPM JavaScript registry has experienced a jump in malware, including packages related to data theft, crypto mining, botnets, and remote code execution, according to security company WhiteSource.