The npm attacks stopped stealing your tokens. That should worry you more, not less.

Why automated pipeline trust is the new target, and what tech leaders must do to lock it down today.

Here is the uncomfortable part of this month’s software supply chain news. The attackers no longer need to steal anyone’s password.

Two compromises landed in July. On the 11th, malicious versions of t…