For the past four months, over 130 malicious NPM packages deploying information stealers have been collectively downloaded ...