SAN FRANCISCO — In a swift move to patch a critical software supply chain vulnerability, GitHub has announced that unvalidated npm trusted publishing configurations will now automatically expire 48 hours after creation. The update comes in direct response to vulnerability research conducted by Bloom Security, which uncovered a systemic architectural flaw dubbed "SlugFest." This loophole […]

