Malicious code in oauth-standard-umbra-antares (npm)

The package oauth-standard-umbra-antares was found to contain malicious code...

Device Code Phishing

This isn't new, but it's increasingly popular: The technique is known as device code phishing. It exploits "device code flow," a form of authentication formalized in the industry-wide OAuth standard. Authentication through device code flow is designed for logging printers, smart TVs, and similar...