Incident hitting npm users is likely the biggest supply-chain attack ever.
https://arstechnica.com/security/2025/09/software-packages-with-more-than-2-billion-weekly-downloads-hit-in-supply-chain-attack/?utm_brand=arstechnica&utm_social-type=owned&utm_source=mastodon&utm_medium=social









