A Delaware judge ruled the bank must keep footing the fraudster's bills, a tab topping $100 million that includes a lavish meals, hotel upgrades, and hundreds of dollars worth of gummy bears.

JFrog says six malicious npm packages used hidden install-time execution, JSONKeeper fetches, and sandbox checks to enable remote access.