ChainDrop: when malicious npm packages spread themselves
What ChainDrop teaches us about credential theft, self-propagating npm malware, and practical supply-chain defenses.
#Supply Chain
The end of npm classic tokens and safer package publishing
Why package publishing is moving from long-lived npm tokens toward short-lived credentials.
S1ngularity: the Nx package supply-chain attack
A review of the Nx S1ngularity attack and the protections frontend teams can actually apply.