Two NPM Packages for Node.js Hiding Dangerous TurkoRat Malware

The packages – named nodejs-encrypt-agent and nodejs-cookie-proxy-agent – were collectively downloaded approximately 1,200 times and were available for more than two months before they were identified and taken down.