Highly invasive backdoor snuck into open source packages targets developers

Packages downloaded thousands of times targeted people working on sensitive projects.


https://bit.ly/3u2BSEx