Union is NOT at risk from the massive industry-wide NPM supply chain attack. We use @nixos_org for fully reproducible builds. This means that we know byte-for-byte exactly what will be included in our builds. The Nix level sha256 of our NPM dependencies has not been altered in…

🚨 There’s a large-scale supply chain attack in progress: the NPM account of a reputable developer has been compromised. The affected packages have already been downloaded over 1 billion times, meaning the entire JavaScript ecosystem may be at risk. The malicious payload works…



zkgm


United States Tren
Loading...

Something went wrong.


Something went wrong.