Newsletter #015: A Break from Survival Mode 🥹

After a rough, overloaded stretch, I have taken on a new role as the Node.js AI Security Engineer in Residence, funded by Alpha-Omega. From there we dig into the OpenJS CNA API PoC I built to let projects manage their own CVEs, with Node.js adoption now underway, and why npm@12 blocking install scripts only stops install-time attacks while execution-time becomes the next target. Plus a heavy…