color npm package compromised (via tumdum) — discussion

#javascript #security