
What Is SlugFest, the npm Trusted Publishing Vulnerability?
A new npm Trusted Publishing vulnerability called SlugFest lets attackers hijack packages without stealing credentials. Security firm Bloom Security disclosed the flaw this month. GitHub had spent four months validating







