Malicious npm packages abuse dependency confusion to profile developer environments

Microsoft·May 29

This story is reported by Microsoft. Read what other outlets are saying below, then open the original report for full details.