https://nu.federati.net/url/287438 [www bleepingcomputer com]

200+ #npm and #pypi packages caught dropping #Linux cryptominers.

> These packages are largely typosquats of widely used libraries and each one of them downloads a Bash script on Linux systems that run cryptominers.

> It appears that both registries cleared the typosquats fairly quickly from their platforms before these could do more harm to developers.

This appears to be a characteristic behavior of #monero / #xmr #cryptocurrency users. This is by no means the first wave of mining attacks against servers.

Source: https://freeradical.zone/@thenewoil/108852026058423028