Malicious npm packages target Ethereum developers' private keys

https://www.bleepingcomputer.com/news/security/malicious-npm-packages-target-ethereum-developers-private-keys/