Risky Bulletin: Damaging worm rips through npm ecosystem
Source: Risky Business News · Category: Supply Chain
Damaging worm discovered in npm package ecosystem. Law firms using Node.js dependencies (internal tools, client tech stacks) face supply chain risk. Audit firm's npm dependencies and client-supplied code for worm signatures; coordinate with development teams.