September 8, 2026 13 min read npm Supply Chain: The Worm That Walked In Through Trusted Publishing Leer más Security npm Supply Chain JavaScript DevSecOps CI/CD