Hackers have tricked novice hackers, known as “script kiddies,” into using a fake hacking tool which secretly installs malware onto their devices. The malware, which affects over 18,000 devices worldwide, can steal sensitive data and control devices via Telegram. The malware spreads through a GitHub repository and other file-sharing platforms, with most reported cases in India, Russia, the US, Ukraine, and Turkey.

NPM packages are infected with malware, again – How-To Geek
NPM packages are infected with malware, again How-To Geek


