A malicious actor used a compromised Ripple dev account to publish commits to NPMThe commits would grant access to people's ...