Open Source Package with 1 Million Monthly Downloads Stole User Credentials

A widely used open-source package named element-data has been compromised, stealing credentials from millions of users. This incident highlights the security risks in software supply chains and the urgent need for better open-source security protocols.