Malicious Rspack, Vant packages published using stolen NPM tokens

https://www.bleepingcomputer.com/news/security/malicious-rspack-vant-packages-published-using-stolen-npm-tokens/