No. 1Score 0.83
Native addon camouflage: 42 armed GitHub repos reveal hidden NPM publisher
Judge 2 Detailed supply-chain security investigation of npm and GitHub compromise with decoded payloads, IOCs and remediation; highly actionable and substantiated, though some attribution remains inferential.