If you run an online store, your customers are almost certainly browsing, researching, and buying on their smartphones.

Unplugged holes in the npm and yarn package managers could let attackers bypass defenses against Shai-Hulud A researcher at Koi Security says the two key platforms have not plugged the vulnerabilities ...