#npm

Malicious Payment SDK Packages Target Developers on npm and PyPI

Socket has revealed that malicious payment SDK packages on npm and PyPI are compromising developer credentials and CI/CD environments, with 17 packages identified.