JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.

June was sweltering, but the summer heat didn’t slow down open-source software developers. Last month delivered a wave of app ...