NPM package ‘is’ with 2.8M weekly downloads infected devs with malware

https://www.bleepingcomputer.com/news/security/npm-package-is-with-28m-weekly-downloads-infected-devs-with-malware/