npm worm that looked like a test secretly armed 42 GitHub repositories, researchers say
JFrog finds 'testmetest' campaign hit real developer accounts after SafeDep saw no victims
A self-replicating npm worm that initially appeared to be a harmless test had in fact compromised 42 GitHub repositories belonging to 11 owners, with accounts hijacked as early as July, according to security researchers at JFrog.