
The npm compromise that shook JavaScript —what happened, who’s at risk, and how to respond without blaming maintainers
If you write JavaScript, you felt it: a wave of alerts, frantic greps through lockfiles, and a long evening of incident response. On September 8, […]