Latest from Thijs
Sponsored Content
Why Software Supply Chain Security Is Moving to the Gate
March 2026: malicious versions of axios get published directly to npm. May 2026: attackers forge valid provenance for 42 TanStack packages on npm, with 84 malicious versions shipped before detection. August 2026: a worm uses one maintainer’s stolen credentials to self-propagate through keyv and its dependent packages. Builds pull in thousands of open source packages […]
Sep 24, 2026 · 3 min