Stay vigilant when using a platform NOT running Guardrail.
NPM is **NOT** in the Guardrail stack ✅, please continue to verify addresses and invoices from disparate devices.
- branta team
Discussion
bunch of thoughts here. Team will be writing more tomorrow.
TLDR; Branta running perfectly, please use where possible
Published 3 weeks ago: how Guardrail mitigates this exact supply chain attack: https://brantaops.substack.com/p/unlocking-triangulated-security
published 4 days ago on why we didn't design guardrail as a dependency