npm supply-chain attacks: which defences actually stop them
Malicious npm packages get in through three doors. Which measures close which door, which ones only look like they do, and what a hardened repository looks like in practice.
- Security
Notes from client work on Angular, design systems, Tailwind CSS, Statamic and Laravel.
Posts tagged npm · Show all posts
Malicious npm packages get in through three doors. Which measures close which door, which ones only look like they do, and what a hardened repository looks like in practice.