G github.blog NPM security update: Attack campaign using stolen OAuth tokens 272 points todsacerdoti 4 years ago 126 comments