Malware Injected into 6 npm Packages After Maintainer Tokens Stolen in Phishing Attack by | Jul 20, 2025