https://www.techtaffy.com/malware-found-in-npm-package-with-millions-of-weekly-downloads-the-record/
Malware found in npm package with millions of weekly downloads -- The Record