Policy
impact 16
New npm supply-chain attack self-spreads to steal auth tokens
New npm supply-chain attack self-spreads to steal auth tokens A new supply chain attack targeting the Node Package Manager (npm) ecosystem is stealing developer credentials and attempting to spread through packages publ…
Why it matters
Worth watching closely: the interplay between attack and supplychain could reshape how organizations approach selfspreads.