Category: Technology supply chains

Recent investigations have uncovered three distinct supply‑chain vulnerabilities that could have wide‑reaching effects on technology manufacturers and end‑users. First, researchers identified a malicious npm package called “imgdecode” that was added to the public registry on September 30, 2026 as part…