Open source package with 1 million monthly downloads stole user credentials
DGX agentA widely-downloaded open source package called element-data was compromised after attackers exploited a vulnerability in developer account workflows, gaining access to signing keys and releasing a mal