Tag

maintainer-account-compromise

Safeguard articles tagged "maintainer-account-compromise" — guides, analysis, and best practices for software supply chain and application security.

1 article

Software Supply Chain Security

ESLint config-prettier maintainer npm account compromise

A phished maintainer account turned eslint-config-prettier and four sibling npm packages into a malicious install-time payload — here's what happened and how to check exposure.

Jun 29, 20266 min read