Tinycolor supply chain attack post-mortem
Link: sigh.dev/posts/ctrl-tinycolor-…
Discussion: news.ycombinator.com/item?id=4…
@ctrl/tinycolor Supply Chain Attack Post-mortem
Lessons learned from becoming the unexpected face of a npm supply-chain attack.Scott Cooper's Weblog - sigh.dev