npm supply chain securityLa ruptura: Los paquetes npm en los que confían tus proyectos se han convertido en el vector de ataqueHow two separate waves in September 2025 turned trusted JavaScript libraries into delivery vehicles for crypto theft and self-spreading wormsnpm Supply Chain AttackJavaScript SecuritySoftware Supply ChainOpen Source SecurityPatch Tuesday·Jun 12, 2026·6 min readLeer la historia