Here's another bit of evidence - they've just added a new "exclusive" label to the Xbox dashboard, and it'll likely appear ...
A poisoned npm package infected 140+ projects with a hidden payload. This report highlights how to detect, hunt, and defend ...