'IconBurst' supply chain attack uses typo-squatting to spread malicious Javascript packages via NPM

Security researchers warn developers to stay on the lookout for these type of typo-squatting spoofs, which are similar to common email phishing attacks.

attack cybercrime iconburst javascript malicious npm supply supply chain supply chain attack third party risk typo