GitLab discovers widespread npm supply chain attack
Yet another week; yet another supply chain attack...
I'm still not sure about, or won over by, Next.js. Here's another post that covers some things that I think touch on what makes me uneasy about it as a development tool choice.