« BackNPM 'Is' Package Hijacked in Expanding Supply Chain Attacksocket.devSubmitted by feross a day ago