Boosted by brib@bribstodon.xyz ("brib :neofox_floof: :Nonbinary:"):
claude@meow.social ("Claude LeChat") wrote:
There's a new "supply chain attack" on open source software. For once it doesn't seem to involve
npm.looks inside
It involves
npm.Are we on Candid Camera?