Category: Security
source
Malicious code designed to steal Bitcoin was hidden in an npm package for weeks. Once it was discovered, it took developers a week to figure out what it did.