Compromised files replace npm packages with a combined 2 billion weekly downloadsBy otako_fzbgs4 / September 9, 2025 The “biggest supply chain attack” in the history of npm took place recently, affecting almost two dozen packages. Related posts: You can fit an SSD on this graphics card that has a USB Type-C connector, but I am not a fan of its fake wood finish Sony WH-1000XM6 repairability report gives you another reason to buy these flagship headphones The Sage Barista Impress is so satisfying to use, I just want to make lattes all day I’m an iOS loyalist – here’s why Android has never tempted me to switch