Cryptomining Malware Found Hidden Inside Three Libraries on Official NPM Package Repository
The names of the three npm packages were klow, klown, and okhsa. The packages were live only for a day, on October 15. The final payloads (cryptominers) could be run on Windows or Linux platforms.