Security protections on GitHub were not breached but individual customer protections were, and autonomous coding agents ...
Blocking install scripts closes one route for malicious npm packages. The malicious indexed-btree package shows why ...