GitHub will address weak authentication and overly permissive tokens in the NPM ecosystem, following high-profile threat campaigns like those involving Shai-Hulud malware.
First seen on darkreading.com
Jump to article: www.darkreading.com/application-security/github-secure-supply-chain-npm-hacks-ramp-up
