Harmful npm package caught wanting to steal sensitive Discord plus browser files

Destructive code was hidden in the JavaScript library for dealing with the “Fall Guys: Greatest Knockout” game API.

Read more from the Source