The Supply Chain Attack That's Already In Your Codebase

TL;DR Supply chain attacks are the fastest-growing threat to production systems. They work because you don't verify what you install. Three vectors: typosquatting (npm publish reqest instead of request), dependency injection (compromised package owne...