The npm repository was flooded with more than 15,000 packages with referral links
Checkmarx analysts noticed that the npm repository was flooded with more than 15,000 packages with "junk" links. The attackers used referral links of various trading sites, profiting from their referral programs.