Threat Post - NPM Package Steals Passwords via Chrome’s Account-Recovery Tool

In another vast software supply-chain attack, the password-stealer is filching credentials from Chrome on Windows systems.

from Threatpost https://threatpost.com/npm-package-steals-chrome-passwords/168004/