Poisoned proxy PACs! The NPM package with a network-wide security hole…

3,000,000 downloads a week… if only they’d read the fastidious manual!
Source: nakedsecurity.sophos.com