Hacker News new | ask | show | jobs
by whimsicalism 182 days ago
that’s just a vulnerability in a dependency. a supply-chain attack is introducing malicious code in a dependency