Risky Bulletin: Damaging worm rips through npm ecosystem
Show notes
RubyGems disables sign-ups after an attack on staff, Instructure paid the ransom, the Gentlemen ransomware operation gets hacked, and another major supply chain attack on npm (yawn).