npm 3 How to safely inspect a repository before running anything on your machine May 20, 2026 Watch out, your recruiter might be a scam May 20, 2026 The LiteLLM Supply Chain Attack — What AI-Dependent Codebases Should Audit Apr 6, 2026