Curated cybersecurity briefings on active threats, vulnerabilities, and emerging risks
The malicious release was built from the project's own main branch and published with an npm provenance attestation.