npm Package Uses QR Code Steganography to Steal Credentials – Posted on September 24, 2025 By Joe-W Privacy/Governance Feed Malicious npm package Fezbox uses QR codes to steal credentials from browser cookies – Read More –