Open Source JavaScript Developers Shocked by Utterly Unpredictable Supply Chain Attack That Happens Every MonthMay 18, 2026 Another npm supply chain attack leaves JavaScript developers mystified by this completely unpredictable monthly occurrence. Other ecosystems with actual security measures report zero incidents, as usual.