@debbie
1/ You may have seen reports of today’s npm supply chain attack.
@privy is not impacted – none of the compromised packages are part of our direct dependencies.
Our security team has also created a script for others to scan their own code bases.