GitHub Aims to Secure Supply Chain as NPM Hacks Ramp Up

GitHub will address weak authentication and overly permissive tokens in the NPM ecosystem, following high-profile threat campaigns like those involving Shai-Hulud malware.