New Npm 'Ghost Campaign' Uses Fake Install Logs to Hide Malware (infosecurity-magazine.com)

• Fake npm install logs used to conceal malware
• Steals sudo passwords and cryptocurrency wallets
• Deploys RATs to exfiltrate system data

"A new npm campaign called 'Ghost' hides malware in fake install logs to steal sudo passwords and deploy RATs that loot cryptocurrency and data."