“`html

Cybersecurity analysts have warned of a supply chain breach that has aimed at widely-used npm packages through a phishing initiative intended to acquire the project maintainers’ npm tokens.

The seized tokens were subsequently employed to release harmful versions of the packages straight to the registry, bypassing any source code updates or pull requests on their individual GitHub repositories.

The roster of impacted

“`