student proxies

148 npm packages disguised as student web proxies were used to turn browsers into a DDoS botnet for two weeks in May, according to JFrog's research. The packages served as a booby-trapped proxy site hosted via the npm registry, targeting students rather than developers.