Destructive malware available in NPM repo went unnoticed for 2 years
Some of the payloads were limited to detonate only on specific dates in 2023, but in some cases a phase that was scheduled to begin in July of that year was given no termination date.…