Following major supply chain attacks on NPM packages, security researchers argue for the immediate adoption of phishing-resistant authentication methods like passkeys.
A Dune-inspired worm recently hit CrowdStrike and npm, infecting hundreds of packages. Here's what happened - and how to protect your code.