One line of malicious npm code led to massive Postmark email heist

It appears, however, that the developer took the legitimate code from the Postmark MCP server's GitHub repository, added the ...