SSH keys stolen by stream of malicious PyPI and npm packages

A stream of malicious npm and PyPi packages have been found stealing a wide range of sensitive data from software developers on the platforms. [...]

data developers found from software keys malicious malicious npm npm packages platforms pypi pypi packages security sensitive sensitive data software software developers ssh ssh keys stealing stolen stream