Three widely used npm packages, @rspack/core, @rspack/cli, and Vant, have fallen victim to a security breach involving stolen npm account tokens, permitting malicious actors to publish harmf...