PLUS: Cyber-exec admits selling secrets to Russia; LastPass isn't checking to see if you're dead; Nation-state backed Windows ...
Installing apps from the internet can be dangerous, but a package manager can reduce a lot of that risk — and Windows has one ...
Researchers outline how the PhantomRaven campaign exploits hole in npm to enable software supply chain attacks.