Four Malicious npm Packages Deliver Infostealers and Phantom Bot DDoS Malware

Cybersecurity researchers discovered four npm packages containing information-stealing malware. One package contains a clone of the Shai-Hulud worm released by TeamPCP, while another delivers the Golang-based Phantom Bot DDoS botnet.