The attacks are part of a wider campaign known as Mini Shai-Hulud, which has already compromised several open source projects and, in turn, developers and companies that use them.
TE
Source
This article was originally published by TechCrunch and written by Lorenzo Franceschi-Bicchierai.
Read original article on TechCrunch