Npm Package Hides Malware in Steganographic QR Codes
Wednesday, September 24, 2025 8:55 AM | darkreading
The poisoned package, purporting to be a JavaScript utility, threatens the software supply chain with a highly obsfuscated credential stealer.