Security Digest

Npm-Supply-Chain

1 security digest tagged “npm-supply-chain” · all security digest

Security Digest

Worm in the Supply Chain, a Wide Open Front Door

A self-propagating npm worm dubbed ChainDrop infected more than 400 packages with a combined two billion-plus downloads, Framework disclosed a CVSS 10.0 SQL …