More popular npm packages hijacked to spread malware

Criminals aim to smuggle malware in a widely popular npm package with over 30 million weekly downloads.