Security researchers at Checkmarx Zero have identified a malware campaign that circumvents npm's recent crackdown on lifecycle scripts, one of the package manager's key defensive measures against supply chain attacks. npm (short for Node Package Manager) is the default package manager for the Node.js JavaScript runtime environment. It helps developers install, share, and manage reusable code libraries (called packages) in their projects. The discovery signals that attackers are adapting quickl
