function

A malicious npm package reached over 2 million weekly downloads by hiding its payload in a routine library function rather than an install script.

The software supply chain has long been regarded as one of the most vulnerable attack surfaces in modern cybersecurity, and…