PhantomRaven: NPM Malware Hidden in Invisible Dependencies | Koi Blog

https://www.koi.ai/blog/phantomraven-npm-malware-hidden-in-invisible-dependencies