
The G_Wagon npm package uses an obfuscated payload to attack users and steal their browser credentials.
Security researchers found a risky npm package called ansi-universal-ui on January 23, 2026, which posed as a genuine user interface component

The G_Wagon npm package uses an obfuscated payload to attack users and steal their browser credentials.
Security researchers found a risky npm package called ansi-universal-ui on January 23, 2026, which posed as a genuine user interface component














