Mitigation Guidance for Supply Chain Compromise | Google Cloud Blog
…Audit NPM Package Maintainer Accounts for Stale or Expired Recovery Email Domains: Expired maintainer email domains are a critical risk because attackers can purchase them to intercept password reset emails, take over…