The malware was found in 18 npm packages that together are usually downloaded over 2 billion times per week. But the security ...