Tag

lottie-player-supply-chain-compromise

Safeguard articles tagged "lottie-player-supply-chain-compromise" — guides, analysis, and best practices for software supply chain and application security.

1 article

Incident Analysis

lottie-player npm supply chain compromise

A phishing-driven npm token takeover pushed a crypto wallet drainer into lottie-player, hitting 94K weekly downloads before LottieFiles shipped a fix.

Nov 6, 20257 min read