NPM to implement staged publishing after turbulent shift off classic tokens

Lotusbail npm package found to be harvesting WhatsApp messages and contacts

GitLab discovers widespread NPM supply chain attack

SHA1-Hulud the Second Comming – Postman, Zapier, PostHog All Compromised via NPM