Researchers say the malware was in the repository for two weeks, advise precautions to defend against malicious packages.

Vibecoding. What could possible go wrong? That’s what [Kevin Joensen] of Baldur wondered, and to find out he asked ...