The Sonatype Security Research team has identified a concerning campaign on the npm registry involving 14 malicious npm packages that exfiltrate Kubernetes configurations and SSH keys from compromised machines.
View full story…