Postmortem: Supply Chain Attack via Compromised NPM Package 11 Caused a Production Data Leak

On March 14, 2024, a single compromised NPM package – version 11.2.4 of the widely used json-serializer-utils – leaked 142,000 user PII records from our production fintech stack in 11 minutes, with zero initial alerts from our existing security tooling. 📡 Hacker News Top Stories Right Now Waymo in Portland (64 points) Localsend: An open-source cross-platform alternative to AirDrop (608 points) Microsoft VibeVoice: Open-Source Frontier Voice AI (256 points) AISLE Discovers 38 CVEs in OpenEMR Hea