You should check your npm dependencies and your github workflows !!

https://www.wiz.io/blog/shai-hulud-2-0-ongoing-supply-chain-attack

#cybersecurity #programming