CursedGrabber strikes again with new malware campaign against software supply shains

On January 16th, Sonatype became aware of 3 malicious packages that were published to npm, and leveraged brandjacking and typosquatting techniques that were previously reported.