DLL-based malware targets Windows users after a phishing campaign tricked the maintainer into leaking a token.

Several popular npm packages with millions of weekly downloads were targeted, and one used as a launchpad for malware ...