Researchers outline how the PhantomRaven campaign exploits hole in npm to enable software supply chain attacks.

Twitter initiated a subpoena, asking GitHub for indentifying information on the leaker, whose username appears to be a nod at Musk.