Aqua Security

NPM Ecosystem Hit by Supply Chain Attack, TeamPCP Uses Malicious Worm Toolchain

A devastating attack compromised 42 packages from the @tanstack namespace and spread to dozens of other maintainers. The worm prod