npm Infostealer Campaign Traced to Israeli Cybersecurity Startup
Researchers at OpenSourceMalware.com identified seven malicious npm packages published in June 2026 that acted as infostealers targeting developers in the AI tooling ecosystem, racking up roughly 20,0…