Malicious NPM package steals Chrome passwords (bleepingcomputer.com)

Something about a malware creator failing to remove their own passwords before distributing it is poetically just