Hackers hijack NPM pkgs with 2B weekly downloads in supply chain attackbleepingcomputer.com·3 pts·mfru·0
Installing with –prefer-offline doesn't work if deps are not available in cachegithub.com·1 pts·mfru·0
SpamChannel: Spoofing emails from 2M domains and virtually becoming Satan [pdf]media.defcon.org·341 pts·mfru·109