A Dune-inspired worm recently hit CrowdStrike and npm, infecting hundreds of packages. Here's what happened - and how to protect your code.
Hackers injected malicious code into nearly a dozen 20 NPM packages with billions of weekly downloads in a software supply chain attack after phishing a maintainer’s account.
(R to L) EY's Ricardo Vilanova, Lila Bioscience's Molly Gibson, Merck's Iya Khalil, Insitro's Mary Rozenman, and Gallop Oncology's Luba Greenwood at BIO 2025. When Google shook the foundations of the ...