Popular NPM library hijacked to install password-stealers, miners | Dark Hacker News