Malware Injected into 6 npm Packages After Maintainer Tokens Stolen in Phishing Attack The Hacker News