Tag

maintainer-compromise

Safeguard articles tagged "maintainer-compromise" — guides, analysis, and best practices for software supply chain and application security.

1 article

Supply Chain Attacks

The eslint-config-prettier npm compromise: when phishing beats your SCA scanner

A phishing email spoofing npm support hijacked a maintainer's account and poisoned eslint-config-prettier, a package with roughly 30 million weekly downloads.

Jul 16, 20266 min read