supply chainCVEsecurity operations
Stop Auto-Updating Everything. Seriously.
The biggest supply chain attack in npm history just happened. 160+ packages compromised. If you had auto-updates on, you swallowed the poison automatically. Here's what to do instead.
May 28, 2026