TGViewer
FrontEnd Development FrontEnd Development @fedevelopment · 28.6K subscribers
Post #9794 1.87K
Oh No, Not Again: A Meditation on npm Supply Chain Attacks

Noting that “npm has become the largest and easiest way to ship malware”, Tane points a finger at Microsoft, the custodians of the npm registry. - https://tane.dev/2025/09/oh-no-not-again...-a-meditation-on-npm-supply-chain-attacks/

#nodejs
tane.dev Oh no, not again... a meditation on NPM supply chain attacks For enterprise software, the software supply chain presents some of the biggiest risks today to data privacy and security.
  • 👍 1
  • 😁 1
Open in Telegram All posts from @fedevelopment
More from @fedevelopment
  1. Oct 23, 2025Nuxt Performance Performance best practices are now available in the Nuxt documentation. -…
  2. Oct 21, 2025Performant Vue applications with Vapor In this article, you’ll explore why it is the futur…
  3. Oct 20, 2025Creating an Immersive 3D Weather Visualization with React Three Fiber - https://tympanus.n…
  4. Oct 19, 2025Optimizing Nuxt Server Side Rendering (SSR) Performance In this article, you'll explore te…
  5. Oct 19, 2025Migrating a Project from Prettier and ESLint to Biome Prettier and ESLint are staples in m…
  6. Oct 18, 2025You May Be Looking for a useSyncExternalStore “when you see a useEffect that updates a use…
Threads Profile ViewerView any public Threads profile without an account.Open ThreadLook →Writing with AI? Make it sound human.Metric37 rewrites AI drafts so they read naturally. Free AI detector, 1,500 words free.Try Metric37 →