Massive threat campaign strikes open-source repos, Sonatype spots new CursedGrabber malware

Sonatype has discovered more malware in the npm registry which has led to the discovery of a novel and large-scale malware campaign, dubbed CursedGrabber, leveraging the open-source ecosystem.