This 2FA phishing scam pwned a developer - and endangered billions of npm downloads

https://www.zdnet.com/article/this-2fa-phishing-scam-pwned-a-developer-and-endangered-billions-of-npm-downloads/