Microsoft Exposes 14 Typosquatted npm Packages Published in 4 Hours to Steal CI/CD Secrets
A newly created npm maintainer account named vpmdhaj uploaded 14 typosquatted packages in a span of just four hours on May 28, 2026, Microsoft revealed in a security advisory. The rapid-fire campaign...