testmetest npm campaign hijacks 42 GitHub repositories to steal credentials
JFrog links the worm to hidden CI publishers on short-lived branches; disabling install scripts does not stop a newer import-triggered path.
Stories per day · 30 days
1 stories, newest first · one card per story
Stories tagged #testmetest