npm Adds 2FA-Gated Publishing and Package Install Controls Against Supply Chain Attacks Read Article »
‘Underminr’ Vulnerability Lets Attackers Hide Malicious Connections Behind Trusted Domains Read Article »