Hundreds of compromised packages pulled as registry shifts to 2FA and trusted publishing GitHub, which owns the npm registry ...

NPM developer qix's account compromise potentially puts user funds at risk by compromising library dependencies used by bitcoin wallets.

The developers have fixed several vulnerabilities in the current version of the Chrome web browser. Attacks are already occurring.