Google recently released DiffusionGemma, and it's weird in the best way.
A poisoned npm package infected 140+ projects with a hidden payload. This report highlights how to detect, hunt, and defend ...