npm supply chain: valid certificates, stolen accounts

Stolen credentials produced valid Sigstore certificates, clearing 633 malicious npm packages — one of seven developer tool attack surfaces that failed.

Raccontata daventurebeat.com