Devops

Dependabot Says Update Now. Supply-Chain Attacks Say Slow Down.

Konrad Madej
DevOps
18 Jul, 2026

On September 8, 2025, someone phished the maintainer of chalk and debug, two of the most downloaded packages on npm. The malicious versions were live for about two hours before they were pulled. In th