1 post
314 npm packages were compromised because the consumer install path does not verify publisher identity. The boundary failed at install, not registry.