1
Hackers have compromised dozens of popular open source packages in an ongoing supply chain attack
数十个流行开源软件包遭供应链攻击，黑客持续投毒，开发者需警惕依赖风险
The attacks are part of a wider campaign known as Mini Shai-Hulud, which has already compromised several open source projects and, in turn, developers…