Bad actors using typo-squatting place 39 malicious packages in npm that went undetected for two weeks. How should the open source community respond? Software development relies heavily on trust, ...

Aikido Security Ltd. today disclosed what is being described as the largest npm supply chain compromise to date, after ...