Security8 MIN
Inside the npm supply-chain attack that shipped to 40,000 projects
A single compromised maintainer token, a post-install script, and eleven days before anyone noticed. Here is the full timeline.
2026-08-03
ls ./category/security
Breaches, vulnerabilities, malware and the patches that matter.
A single compromised maintainer token, a post-install script, and eleven days before anyone noticed. Here is the full timeline.