PostHog admits Shai-Hulud 2.0 was its biggest security scare
go.theregister.com
: Automation flaw in CI/CD workflow let a bad pull request unleash worm into npm