Newsletter #013: Large Phishing Operations Against Maintainers 🎯 A coordinated phishing campaign is targeting high-impact open source maintainers. Plus: Scorecard v6 evolving into a security evidence engine, 12 CVEs patched across undici, fastify, path-to-regexp an...

🔖 The latest issue of my #newsletter is live, issue 013.

March recap: 12 CVEs across #undici, #Fastify, #Lodash & #pathtoregexp, a state-actor supply chain attack on #axios, and the #Nodejs security bug bounty paused 🔐

blog.ulisesgascon.com/newsletter-i...