The "is" package was infected with cross-platform malware after a scam targeting maintainers The popular npm package "is" was ...

In a newly discovered supply chain attack, attackers last week targeted a range of npm-hosted JavaScript type testing ...

What steps can reproduce the bug? I have a project with @databricks/sql as a dependency which I'm testing out switching from node to bun. As it specifically had node mentioned in the start command, I ...