Attackers Abuse npm Trusted Publishing in GHAPPIER Campaign

CloudSEK linked GHAPPIER to a compromised npm package with valid trusted-publishing provenance

Source: Infosecurity Magazine