npm Supply Chain Attack via Open Source maintainer compromise
On Monday, September 8th, a highly regarded open source developer, ~qix, was compromised via a phishing email.
Daily edition · DevSec
The daily ledger
TILens turns technical updates into a focused daily brief: official releases, trusted reporting, and practitioner analysis, deduplicated and organized by topic.