discovered 2026-04-08
Compromise of the @fairwords npm scope (websocket, loopback-connector-es, encryption) delivering a credential-harvesting worm.
Harvest credentials and self-propagate through the npm scope.
