Supply Chain

馃彮 Supply Chain

Software Bill of Materials, Dependency Confusion, Code Signing, Build Security

Feeds to Scour
SubscribedAll
Scoured 658 posts in 5.2 ms

Malware Insights: Miasma Campaign

聽馃Malware Analysis
cookie.engineer路路Hacker News

OWASP Incubator Project Helps Developers Find and Fix Vulnerable Dependencies in Seconds

聽馃敀Security
securityweek.com路

The Worm in the Supply Chain: How Defender for Endpoint and Sentinel for SAP BTP Caught Shai-Hulud

聽馃Malware Analysis
techcommunity.microsoft.com
路

You can fork a package, but can you own it?

聽馃敀Security
event-driven.io路

Vulnerability and malware checks in uv

聽馃Unikernels 聽Content type: Blog
astral.sh路路Lobsters, Hacker News, Hacker News

81% of teams ship broken code: Mythos made that inexcusable

聽馃AI Security
techradar.com
路

A popular OpenAI Codex tool with 29,000 weekly downloads has been quietly stealing developer tokens for a month

聽馃實Browser Exploits
thenextweb.com路

Minimus Announces General Availability of Supply Chain Protection and minicli

聽馃摝Container Security
nextbigfuture.com路

My experience rejuvenating CI/CD infrastructure with AI | TechTarget

聽馃AI Security
techtarget.com
路

GlassFish 8.0.3 Released: Performance optimizations and security fixes

聽馃敀Security
omnifish.ee路路r/java

GitHub nukes 70+ Microsoft repos, breaks CI/CD pipelines, following suspected worm infections

聽馃實Browser Exploits 聽Content type: News
theregister.com路路Hacker News

debsecan-mcp v0.1.2 released to PyPI

聽馃挜Binary Exploitation 聽Content type: Blog
copyninja.in路

#069 - Anthropic's Fable 5 can silently get dumber, Apple's container ships Docker-killer Linux VMs

聽馃Unikernels
indiehacker.news路

docs(release): fix sequential patch numbering 路 openclaw/openclaw@fb9dc86

聽馃實Browser Exploits 聽Content type: Code
github.com路

How 56 npm packages used binding.gyp to steal CI/CD secrets

聽馃實Browser Exploits 聽Content type: Blog
reversinglabs.com路

If You Use Claude or Gemini, This Microsoft Breach Means Your Data Is at Risk

聽馃實Browser Exploits
scienspire.com路路Hacker News

Supply chain attacks: is a Kessler Syndrome for OSS a risk worth acknowledging?

聽馃敀Security
keydiscussions.com路路Hacker News

Code is being written everywhere, and the device is the only constant

聽馃毃Incident Response 聽Content type: Blog
aikido.dev路

pnpm 11.5 Adds Support for Recognizing npm Staged Publishes

聽馃實Browser Exploits 聽Content type: Blog
socket.dev路

New Shai-Hulud attack trojanizes 19 science-focused PyPI packages

聽馃寪Network Security 聽Content type: News
bleepingcomputer.com路
Sign up or log in to see more results
Sign UpLogin

Keyboard Shortcuts

Navigation

Next / previous item
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Browse
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help