Forty-five million weekly downloads. One compromised maintainer. Three hours of exposure before anyone noticed.
Phishing surge, LinkedIn tracking claims, spyware use, and rising stealers expose growing abuse of trusted systems.