The breach hit core JavaScript libraries such as chalk and strip-ansi, downloaded billions of times each week, raising alarms over the security of open-source software.
Crypto users urged to take extreme care as NPM attack hits core JavaScript libraries
