In a wage-theft settlement, DoorDash now has to pay its workers around 100 times what it spent trying to beat Zohran Mam

A self-propagating worm is publishing compromised versions of dozens of npm packages using stolen maintainer credentials. See the affected packages and what to do now.