A previously unknown threat actor has been discovered using malicious npm packages to target developers and steal source code and configuration files from their machines.
View full story…