email

czirker@commercehub.com

discovered 2026-06-24

Compromised npm maintainer account (czirker / Clint Zirker), patient zero for the LeoPlatform wave. Single maintainer on all 20 infected packages.