supply-chain confirmed first disclosed 2026-10-13 10:02 UTC Over 1,500 npm packages exposed by Trusted Publishing validation flaw Confidence40% Sources (1) Over 1,500 npm packages exposed by Trusted Publishing validation flaw — CSO Online 2026-10-13
