SHA1-Hulud, npm supply chain incident

Snyk identified a new supply chain attack in the npm ecosystem, referred to as SHA1-Hulud. We believe this is a second wave of the Shai-Hulud attack. Learn what this attack is and how Snyk is responding.
原文:https://www.a8q9.cn/en/article/sha1-hulud-npm-supply-chain-incident-26952f.html