An extremely popular NPM package used in many JavaScript projects has been compromised and can wreak havoc on your machine if ...
How can an extension change hands with no oversight?