Npm Packages Compromised In Attack

A sophisticated phishing email, disguised as an official npm support message, tricked a maintainer into providing his credentials and a two-factor authentication (2FA) token on a fake login page. Thi…