Cybersecurity researchers have discovered malicious code in an npm package after a malicious package as a dependency to the ...