Six major supply chain campaigns hit npm

Key Takeaways Six confirmed supply chain campaigns hit npm, PyPI, Go modules and Packagist between March and July 2026. None of them needed a bug in anyone’s application code, just...