7 ms·Six JavaScript zero-day bugs lead to fears of supply chain attack10 points by Bender 10mo agomove-on-by 10mo agoThese are not JavaScript zero-day bugs, they are tooling bugs. researchers said the new bypass bugs were found in npm, pnpm, vlt, and Bun.