Suspicious Maintainer Unveils Threads of npm Supply Chain Attack
This story starts when Sébastien Lorber, maintainer of Docusaurus, the React-based open-source documentation project, notices a Pull Request change to the package manifest. Here’s the change proposed to the popular cliui npm package:
Tags: engineering, vulnerabilityinsights, javascript, node