Why NPM Malware Keeps Reaching for Bun | Supply Chain Security | Blog | Endor Labs

Why npm malware keeps reaching for Bun: how attackers abuse install-time scripts, why Bun helps them evade Node-based defenses, and the controls that actually reduce risk.