Malicious npm Package Typosquats Popular TypeScript ESLint P...

The attackers released 43 versions of the package within two weeks, a strategy aimed at evading detection by automated tools. Although the malicious package was removed from npm on December 1, its impact was far-reaching.