MALICIOUS NPM PACKAGES EXFILTRATED HUNDREDS OF DEVELOPER SSH KEYS VIA GITHUB

Summary from the TLDR InfoSec newsletter

Two malicious npm modules, warbeast2000 and kodiak2k, were found to have garnered over 1500 downloads on npm before being removed. The malicious packages ran a post-install script that searched for SSH keys and then uploaded them to a GitHub repository.