{"type": "article", "title": "Open source package with 1 million monthly downloads stole user credentials", "publisher": "Web Pulse", "url": "https://wpnews.pro/news/open-source-package-with-1-million-monthly-downloads-stole-user-credentials", "original_source": "https://arstechnica.com/security/2026/04/open-source-package-with-1-million-monthly-downloads-stole-user-credentials/", "published": "2026-04-27T21:04:03+00:00", "accessed": "2026-06-13", "id": "open-source-package-with-1-million-monthly-downloads-stole-user-credentials"}