GitHub Security Lab
Dear open source community, read our communication on CanisterWorm, learn what GitHub does to protect the community and what you can do to secure your supply chain https://www.linkedin.com/pulse/communication-canisterworm-github-securitylab-3kobc/?trackingId=%2BjSAaw7KT2eBfuJKuAOcww%3D%3D
Communication on CanisterWorm

Dear open source community, On March 20th GitHub learned of a new supply chain attack through public disclosure by socket.dev dubbed CanisterWorm that affects more than 64 unique npm packages.

6:46pmWeb