Another npm supply chain worm is tearing through dev environments

A self-propagating npm supply chain worm has compromised multiple open-source packages associated with Namastex Labs, stealing secrets from developer environments. The attack shares tactics with previous CanisterWorm incidents attributed to TeamPCP. Security vendors Socket and StepSecurity are tracking ongoing malicious releases.