North Korean Hackers Just Poisoned 1,700 npm and PyPI Packages — Here's How to Not Get Owned
A state-sponsored hacking group pushed 1,700 malicious packages across npm, PyPI, Go, and Rust ecosystems. If you're a solo dev running npm install without thinking twice, this is your wake-up call.