Supply Chain Security

Npm package hijacking is a software supply chain attack that turns trust in a package into the attack path. Attackers do not need to modify repository code if they can control the account that publishes the package.