Malicious npm 'colors' typosquats pack Discord malware

Sonatype has caught newer typosquats of the popular 'colors' npm library that contain obfuscated malware. The malware in question comprises Discord info-stealers attempting to hijack the user's Discord tokens and session information.

colors devzone discord featured malicious malicious npm malware malware prevention nexus firewall npm vulnerabilities