Crims poison 150K+ npm packages with token-farming malware

Yet another supply chain attack has hit the npm registry in what Amazon describes as "one of the largest package flooding ...