https://actu365.com/tek/securite-informatique/2021/11/05/npm-libraries-coa-and-rc-have-been-hijacked-to-deliver-password-stealing-malware/
npm libraries coa and rc. have been hijacked to deliver password-stealing malware