Researchers say the malware was in the repository for two weeks, advise precautions to defend against malicious packages.

The state’s Department of Environmental Quality recently advised a Mountain Valley Pipeline partner that the agency could require the project to pay for hiring additional technical expertise to ...