Security News Developer Workstations Are Now Part of the Software Supply Chain TheHackerNews Daniel Bender 18 May 2026 Share 3 campaigns hit npm, PyPI, and Docker Hub in 48 hours, exposing secrets from developer and CI/CD environments.