https://jdstaerk.substack.com/p/we-just-found-malicious-code-in-the
大规模供应链攻击，主要是 chalk 受影响
大规模供应链攻击，主要是 chalk 受影响
Substack
Anatomy of a Billion-Download NPM Supply-Chain Attack
A massive NPM supply chain attack has compromised foundational packages like Chalk, affecting over 1 billion weekly downloads. We dissect the crypto-stealing malware and show you how to protect your projects immediately.
