2025-12-08 UTC
# 
[aciccarello] For context, the npm security issue is that some NPM packages were exploited and install malicious code. What made it particularly bad is that some of the malicious code exploited CI systems to publish more infected packages.