The npm Supply Chain Attack: What Happened and How We (Hopefully) Dodge the Next One

Over the past few weeks, this npm situation has been everywhere, circling the same questions: which packages are safe, and how far did this thing has spread. It’s not just headlines, folks around us have been double checking lockfiles, rotating token...