npm-hack

npm Hack: How Supply Chain Attacks Work and How to Stay Safe

An npm hack rarely means npm itself was breached. It usually means a maintainer account was phished or a package was hijacked. Here is how these attacks unfold and how to defend your builds.