Popular npm linter packages hijacked via phishing to drop malware

Popular npm packages (notably eslint-config-prettier and related libraries) were hijacked after a maintainer fell for a phishing email; attackers used stolen npm credentials to publish malicious package versions that include a postinstall script which runs a trojan DLL via rundll32 on Windows. The report lists specific affected package versions to avoid, notes low detection on VirusTotal for the bundled DLL, and recommends checking lockfiles, CI/build artifacts, and rotating secrets as mitigation.