npm supply chain compromise
Named by 2 kept items in this workspace.
Search every workspace for npm supply chain compromise. It matches the name as written, so it can find other things that share it.
The items that name it 2
Malicious code in a compromised npm package version harvests credentials and self-propagates by republishing itself through other packages the victim can publish.
Compromise of npm packages (global and per-project) as seen in Shai-Hulud and Mini Shai-Hulud campaigns
All techniques in this workspace.