What is Supply Chain Security? Dependencies, SBOMs, and the Attack That Hit 2.6 Billion npm Downloads
- Created
- 13 Oct 2025
- Last reply
- about 1 year ago
- Replies
- 0
- Views
- 0
- Reactions
- 0
Discussion of the blog article What is Supply Chain Security? Dependencies, SBOMs, and the Attack That Hit 2.6 Billion npm Downloads.
Your application is only as secure as every package it depends on. In September 2025, attackers compromised 27 npm packages with 2.6 billion weekly downloads by phishing one maintainer.
Discussion thread — share findings, corrections and follow-ups below.