Poisoned proxy PACs! The NPM package with a network-wide security hole… 3,000,000 downloads a week… if only they’d read the fastidious manual! Source: nakedsecurity.sophos.com