Threat actors are abusing legitimate NPM infrastructure in a new phishing campaign that breaks from the typical supply chain attack pattern.

It is something Sally sees as symptomatic of a wider problem. ‘I do worry that we’re going backwards in the way we represent ...