2 ms·
What is a supply chain attack when it comes to packages? I'd at least include that in the FAQ as I couldn't figure it out.
by theogravity 5y ago
What is a supply chain attack when it comes to packages? I'd at least include that in the FAQ as I couldn't figure it out.
- feross 5y agoThanks for the feedback. You might enjoy this blog post which explains supply chain attack at length and starts off with a concrete example of a recent supply chain attack (the ua-parser-js attack): https://socket.dev/blog/inside-node-modules https://socket.dev/blog/inside-node-modules