Compromised files replace npm packages with a combined 2 billion weekly downloadsBy otako_fzbgs4 / September 9, 2025 The “biggest supply chain attack” in the history of npm took place recently, affecting almost two dozen packages. Related posts: Apple addresses App Store ruling as Fortnite eyes return Google Messages rolling out ‘Unsubscribe’ button to stop SMS and RCS spam Apple v. Epic: What happens next to the App Store and Fortnite? Apple’s consequential App Store setback comes on the eve of a key event