Two billion downloads per week. That’s the download totals for the NPM packages compromised in a supply-chain attack this week. Ninety-nine percent of the cloud depends on one of the ...

The attack's genesis traces back to npm maintainer Josh Junon, known online as "qix," who fell victim to an AI-generated phishing email. According to the report, attackers crafted emails that evaded ...