Security teams are grappling with a major supply chain attack on Axios, a popular JavaScript library with over 100 million ...

事情的起点，是 npm 上发布的 Claude Code 2.1.88 安装包。包里混进了一个本不该公开的 map 文件。这类文件原本只是开发阶段的调试工具，用来在代码被压缩、打包之后，依然能把报错信息对应回原始源码中的具体位置。

A Read-Only Isolation architecture that plugs compliance into institutional AI workflows — enabling instant financial reporting and proactive risk audits ...