Jul 21 2021 NPM Package Steals Passwords via Chrome’s Account-Recovery Tool

Source

In another vast software supply-chain attack, the password-stealer is filching credentials from Chrome on Windows systems via ChromePass. [...]