Criminals have been caught trying to sneak a malicious package on to the popular Node.js platform npm (Node Package Manager). The problem package, 1337qq-js, was uploaded to npm on 31 December, after which it was downloaded at least 32 times according to figures from npm-stat.

Read full article on Naked Security