Exposed: 70+ Malicious npm and VS Code Packages Stealing Data and Crypto in Widespread Attack

Security researchers have discovered multiple campaigns targeting developers through malicious npm packages and VS Code extensions. Socket identified 60 npm packages that collect system data and send it to Discord webhooks, while another set of eight packages disguised as framework helpers...