Four Malicious npm Packages Deliver Infostealers and Phantom Bot DDoS Malware

Four npm packages have been identified as containing malicious code, including a clone of the Shai-Hulud worm. One package delivers a DDoS botnet (Phantom Bot), while the others function as infostealers, stealing sensiti…