Malicious npm Packages That Evade Defenses

This is an impressive piece of malware . Its sophistication says nation-state to me, but there is no direct evidence and certainly no attribution.

Preview courtesy of Schneier on Security. The full article opens on their site.