Subscribe to receive notifications of new posts:

Bashyam Anant

Bashyam Anant

Sr Director, Product Management - Security Forensics

How Cloudflare’s client-side security made the npm supply chain attack a non-event

2025-10-24

Supply Chain AttacksJavaScriptMalicious JavaScriptAIDeveloper PlatformDevelopers

A recent npm supply chain attack compromised 18 popular packages. This post explains how Cloudflare’s graph-based machine learning model, which analyzes 3.5 billion scripts daily, was built to detect and block exactly this kind of threat automatically....