pull down to refresh

126 sats \ 0 replies \ @rblb 16 Sep 2025 \ on: Tinycolor npm Package Compromised in (another) Supply Chain Attack security

Installing npm packages feels like playing russian roulette these days.
This is 100x times worse than the other attack.

write
preview