Shai-Hulud: Whoever controls your package registry controls your pipeline

On September 15, 2025, npm’s registry did something unprecedented: Packages began updating themselves.  No maintainer ran npm publish. No pull The post Shai-Hulud: Whoever controls your package registry controls your pipeline appeared first on The New Stack.

Quelle: Originalartikel öffnen