Art-Template NPM Coruna Browser Exploit Compromise (opens in new tab)
The npm package art-template was compromised in versions 4.13.5 and 4.13.6 to inject remote browser-side JavaScript that redirected users into a Coruna-like iOS Safari exploit delivery chain.
Read the original article