Hacker News Reader

> Consider the recent npm supply chain attack a few weeks ago

What supply chain attack are you referring to?

You know what, I'm sorry, it was polyfill.io, not an NPM package.