Information security
fromSecurityWeek
2 days ago'PackageGate' Flaws Open JavaScript Ecosystem to Supply Chain Attacks
Six vulnerabilities in major JavaScript package managers (NPM, PNPM, VLT, Bun) allow bypassing supply chain protections and enable remote code execution.