Malicious npm Package Mimics ESLint Plugin, Steals Sensitive Data
A recent report by the Socket Research Team uncovers a sophisticated typosquatting attack targeting developers using the popular @typescript-eslint/eslint-plugin. The legitimate @typescript-eslint/eslint-plugin is a cornerstone of TypeScript development, having over...