Malicious actors have hijacked the ‘coa’ and ‘rc’ npm packages; both having not seen new releases in 3 years. Read Sonatype’s blog to learn how hackers choose their targets and how to best protect your data.