Software packages with more than 2 billion weekly downloads hit in supply-chain attack

Incident hitting npm users is likely the biggest supply-chain attack ever.

September 9, 2025

2025-09-09 01:30 GMT · 8 months ago arstechnica.com

Incident hitting npm users is likely the biggest supply-chain attack ever.

Original: https://arstechnica.com/security/2025/09/software-packages-with-more-than-2-billion-weekly-downloads-hit-in-supply-chain-attack/