Popular 'coa' NPM library hijacked to steal user passwords | Heykuki News