supply-chain
The npm Threat Landscape: Attack Surface and Mitigations (Updated July 15)
The npm ecosystem experienced a critical inflection point in September 2025 with the emergence of the Shai-Hulud worm, marking a shift from nuisance attacks to a high-consequence threat landscape. Since then, Unit 42 has…
High

