programming·Programmingbyspez Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm AccountWhat an ol' classic in the age of AI! https://thehackernews.com/2026/03/axios-supply-chain-attack-pushes-cross.htmlOpen linkView original on sh.itjust.works59Comments3
TTechnoCat piefed.socialI always advocate switching to pnpm where install scripts are disabled by default. It has plenty of security features to ward off most supply chain attacks. https://pnpm.io/settings#onlybuiltdependencies https://pnpm.io/settings#minimumreleaseage https://pnpm.io/blog/2025/12/29/pnpm-in-2025#security-by-default 13
It gets better and better lol
I always advocate switching to
pnpmwhere install scripts are disabled by default. It has plenty of security features to ward off most supply chain attacks.Pre and post install hooks are a mistake, jfk