Massive npm Supply Chain Infiltration Targets Developer Ecosystem Giants

This massive npm campaign highlights the evolving sophistication of supply chain attacks, targeting trusted libraries like TanStack and Mistral AI without needing to breach maintainer accounts. It signals a critical shift in attack vectors, necessitating more rigorous and automated dependency auditing for modern software development.