we could talk about the latest supply chain attack: https://tanstack.com/blog/npm-supply-chain-compromise-postmortem https://www.reddit.com/r/programming/comments/1tapmvi/mass_npm_supply_chain_attack_hits_tanstack/ https://tanstack.com/blog/incident-followup