Code published to Node Package Manager (NPM) has been caught stealing passwords from legitimate account recovery tools in Chrome on Windows. That’s based on recent reports, detailing the malicious ...