A rogue npm package and malicious Rust crates are compromising developers’ data, while Cisco scrambles to patch two …

source