discovered
@the-coca-cola-company/ngps-global-common-utils is identified in the SafeDep analysis "sl4x0 Dependency Confusion: 92 Packages Target Fortune 500". A sustained dependency confusion campaign by the sl4x0 actor likely targets 20+ organizations including Adobe, Ford, Sony, and Coca-Cola with 92+ malicious npm packages exfiltrating developer data via DNS.