30,000 npm Packages a Day: GitHub's Fight to Stop Supply Chain Poisoning Every day, 30,000 packages hit npm—hundreds laced with malware. GitHub's cracking down on supply chain attacks starting in Actions workflows. 5 min read 1 month ago