A widely used Node.js code library in NPM’s warehouse of repositories was altered to include crypto-coin-stealing malware. The lib in question, , is downloaded roughly two million times a week by application programmers.

Read full news article on The Register