Oh no, not again... a meditation on NPM supply chain attacks
I’ve been sitting on this article for a while now – well over a year I’ve put off publishing it – but as we’ve seen this week, the time has come to lift the veil and say the quiet part out loud:It’s 2025; Microsoft should be considered a “bad actor” and a threat to all companies who develop software.Of course, if you’re old enough to remember – this is not the first time either…Time is a flat circleHere we are again – in 2025, Microsoft have fucked up so bad, they have likely created an even lar...
Read more at tane.dev