Six JavaScript zero-day bugs lead to fears of supply chain attack(scworld.com)

10 pointsby Bendervor 6 Monaten1 comments

https://www.scworld.com/news/six-javascript-zero-day-bugs-lead-to-fears-of-supply-chain-attack

1 comments

These are not JavaScript zero-day bugs, they are tooling bugs.

    researchers said the new bypass bugs were found in npm, pnpm, vlt, and Bun.