Marketplace that were collectively installed 1.5 million times, exfiltrate developer data to China-based servers.
Koi security researchers found that when NPM installs a dependency from a Git repository, configuration files such as a ...