Supply Chain
The qix compromise (Sept 2025): how 2.6 billion weekly downloads got hit
One phishing email reached one maintainer, and malicious versions of packages with billions of weekly downloads went live. Here is the story and the practical lesson for your own builds.