Security
Shai-Hulud Hit Tensorlake's npm Package: How to Check Your Builds and Rotate Secrets Safely
A poisoned release of an AI sandbox SDK was live for hours. Here is how to find out whether it touched your machines, and why the order of your cleanup matters.