Original link: Hundreds of code libraries posted to NPM try to install malware on dev machines / ArsTechnica.
Ouch.