Tag: supply-chain-attack

All the English-translated articles with the tag "supply-chain-attack".

• When Package Install Becomes a Hack: Why Zero Dependency Matters

  4 Apr, 2026

  In March 2026, the litellm and axios supply-chain attacks hit back-to-back. I trace ten years of dependencies turning from convenience to trust to risk, and use code to show why zero-dependency design is survival, not minimalism.