Researchers Detect Malicious npm Package Targeting GitHub-Owned Repositories
Veracode exposes npm package "@acitons/artifact" stealing GitHub tokens via build scripts.
More info
Cybersecurity
