Sophisticated attack against NPM ecosystem ongoing

NPM is being subjected to a new ongoing attack with a novel execution chain involving package pairs that work together to facilitate additional resource retrieval and execution.

attack devops ecosystem novel npm package third party risk work