An .npmrc token hid malware in Tailwind plugins for npm

A Next.js project sent to a freelancer by a supposed Fiverr client included an npm token that allowed a private…

read more