"Looks like spring cleaning has hit some more shovelware publishers, namely GOGAME CONSOLE PUBLISHER LTD, VRCFORGE STUDIOS ...
Google Threat Intelligence Group warns of active supply chain attack on npm’s Axios library Malicious dependency ...