As a worm spread through hundreds of npm packages in 2025, it didn't exploit a vulnerability – it exploited the architecture.

A worker operates a gun drill on an assembly line for engine blocks for Volvo trucks at the Linamar factory in Arden, North ...