Protecting your Supabase projects from npm supply chain attacks
Supabase reported a typosquat package named `supabase-javascript` on npm that mimicked its official package to phish developers, which npm removed hours later after it had already accumulated real downloads. The company …