Feeds to Scour
SubscribedAll
Scoured 46862 posts in 25.1 ms
Debian to require reproducible builds  ⚙️Build Archaeology
lwn.net
·3d
Mini Shai-Hulud worm hits npm supply chain, compromising 160+ packages via GitHub Actions cache poisoning  💥Exploit Dev
thecybersecguru.com·2d·r/Malware, r/Python, r/javascript, r/node
npm Is on Fire: Why the Architecture Is the Product  🌍Browser Exploits
dev.to·8h·DEV
Traceability & Reproducibility  🤖Archive Automation
mlops.community·1d
Why Reproducible Builds?  ⚙️Build Archaeology
reproducible-builds.org·3d·Hacker News
Mini Shai-Hulud Is Back: NPM Worm Hits over 160 Packages, Including Mistral  🌍Browser Exploits
aikido.dev·1d·Hacker News
Show HN: Safe-install – safer NPM installs with trusted build dependencies  🛡️Memory Safety
npmjs.com·2d·Hacker News
22 OSS packages in 24 hours: what each one earned its slot  📦Software Supply Chain
dev.to·3d·DEV
PSA: How to set minimum release age for your package manager (they all do it differently)  📦Software Supply Chain
lemmy.zip·2d·r/javascript, r/reactjs
lateos-ai/npm-scan: Modern supply chain security for the npm ecosystem. Static + behavioral analysis that catches what npm audit, Snyk, and Socket miss — obfuscated payloads, credential stealers, conditional triggers, sandbox evasion, and worm-like propagation.  📦Software Supply Chain
github.com·1d·Hacker News
Hardening TanStack After the NPM Compromise  💥Exploit Dev
tanstack.com·2d·Hacker News
Twelve Trust Boundaries: A Field Guide to Supply-Chain Defense After axios@1.14.1  🏭Supply Chain
dev.to·6d·DEV
Show HN: FixMyNPM, CLI to fix your insecure npm config  🐛Bug Bounty
github.com·1d·Hacker News
Supply chain npm vs PyPI: I compared both simulations and the most dangerous vector isn't what everyone thinks  📦Software Supply Chain
dev.to·6d·DEV
Handling Midnight SDK Breaking Changes: A Developer's Upgrade Playbook  🔌Interface Evolution
dev.to·2d·DEV
pnpm vs npm vs yarn in 2026: I ran all three on my real monorepo and it forced me to change my mind  💾Persistent Memory
dev.to·4d·DEV
The TanStack npm Attack Shows Why pnpm 11 Matters  🛡️Exploit Mitigations
dev.to·1d·DEV
MLOps Package Template: Turbocharge the Creation of AI/ML Projects ⚡  ⚙️LLMOps
mlops.community·1d
pnpm workspaces in a Next.js 16 monorepo: what the benchmark didn't measure and almost broke my CI  💾Persistent Memory
dev.to·3d·DEV
Lean, Fast, Simple — npm-free GAS Deployment on GitHub Actions with glasp  📦Software Supply Chain
dev.to·2d·DEV

No more posts from CWhiting's subscribed feeds.

Scour all 25695 feedsLearn more about Feeds

Keyboard Shortcuts

Navigation

Next / previous item
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Browse
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help