Six JavaScript zero-day bugs lead to fears of supply chain attack

These are not JavaScript zero-day bugs, they are tooling bugs.

    researchers said the new bypass bugs were found in npm, pnpm, vlt, and Bun.