Popular node-ipc npm package compromised to steal credentials

Hackers injected an obfuscated credential-stealing backdoor into three published node-ipc npm package versions (9.1.6, 9.2.3, 12.0.1) that automatically runs when applications load, fingerprints systems, collects cloud and local credentials, compresses data and exfiltrates via DNS TXT queries; researchers attribute the compromise to an external actor who accessed an inactive maintainer's account and recommend removing affected versions, rotating secrets, and inspecting caches and lockfiles.