Self-propagating npm worm steals tokens via postinstall hooks, impacting six packages and expanding supply chain attacks.
I've handed over the reins, now the AI drives.
The best part? It keeps everything on my own server ...