Microsoft successfully hit by dependency hijacking again

Researcher Ricardo Iramar dos Santos discovered a mysterious dependency used the open-source package SymphonyElectron. This was a spoof of the package with the same name on the NPM registry.