Over 950K weekly downloads at risk in ongoing supply chain attack on Gluestack packages

Pierluigi Paganini

A supply chain attack hit NPM, threat actors compromised 16 popular Gluestack packages, affecting 950K+ weekly downloads. Researchers from Aikido Security discovered a new supply chain attack targeted NPM, compromising 16 popular Gluestack ‘react-native-aria’…