Popular NPM library hijacked to install password-stealers, miners bleepingcomputer.com 9 points by PatrolX 4 years ago · 1 comment Reader PiP Save WalterGR 4 years ago Dupe. https://news.ycombinator.com/item?id=28962168