Cybersecurity researchers have flagged a new set of 175 malicious packages on the npm registry that have been used to facilitate credential harvesting attacks as part of an unusual campaign.

Mobile applications have evolved from “nice-to-have” bolt-on platforms to business-critical channels that are fuelling ...