The lurking code-bombs lift Discord tokens from users of any applications that pulled the packages into their code bases.
Source: Healthcareitnews.com and Read More

New Campaign Targets HR Departments With False Resumes
A campaign by Venom Spider, a financially-motivated threat group, is employing spear-phishing emails to target hiring managers.