Open source package with 1M monthly downloads stole user credentials

(arstechnica.com)

5 points | by aureliusm 5 hours ago ago