On: Shai-Hulud Returns: Over 300 NPM Packages Infected

[Yokohiii]

But relying on the goodwill of commercial sec vendors is it's own infrastructure risk.

[limagnolia → Yokohiii]

So don't rely on their goodwill? Instead, pay them, under a contract.. or do it yourself.

[perlgeek → Yokohiii]

You can also pay a commercial sec vendor if you don't want to rely on their goodwill.