Software Supply Chain

Feeds to Scour
SubscribedAll
Scoured 195 posts in 5.3 ms

NCSC Warns Of Rising Software Supply Chain Attacks Targeting Open-Source Packages

聽馃惂Linux Security
petri.com路

From SBOMs to AI BOMs: Why SPDX 3.0 Matters

聽馃惂Linux Security
malware.news路

Software supply chain attacks: check your dependencies

聽馃惂Linux Security 聽Content type: Blog
ncsc.gov.uk路

Anthropic Helps JFrog Govern the Software Supply Chain

聽鈿栵笍Work-Life Balance
pymnts.com路

Five Supply Chain Security Risks Hiding Inside Your Mobile Apps

聽馃惂Linux Security 聽Content type: Blog
supplychainbrain.com路

GitHub announces npm security changes to tackle supply-chain attacks

聽馃惂Linux Security 聽Content type: News
bleepingcomputer.com路

IronWorm and New Miasma Worm Variant Hit npm in Supply Chain Attacks

聽馃捇Programming
thehackernews.com路

Risky Bulletin: RubyGems adds dependency cooldowns to counter supply chain attacks

聽馃捇Programming
risky.biz路

Socket Partners with Replit to Block Malicious Packages in AI-Powered Development

聽馃捇Programming 聽Content type: Blog
socket.dev路

Massive PyPI Supply Chain Attack Harvests Cloud Credentials via Python Startup Hooks

聽馃惂Linux Security
orca.security路

Supply chain attacks: is a Kessler Syndrome for OSS a risk worth acknowledging?

聽馃惂Linux Security
keydiscussions.com路路Hacker News

NPM-Scan v1.1.0: Four New Detectors for June 2026 Supply Chain Attacks

聽馃惂Linux Security 聽Content type: Code
github.com路路Hacker News

Introducing Package Firewall, blocking over 8,000 vulnerable packages per day

聽馃惂Linux Security 聽Content type: Blog
replit.com路

Shai-Hulud copycat campaign targets Python developers through PyPI typosquatting

聽馃捇Programming 聽Content type: Blog
about.gitlab.com路

Code is being written everywhere, and the device is the only constant

聽馃捇Programming 聽Content type: Blog
aikido.dev路

Supply chain attack alert: .github/setup.js

聽馃捇Programming 聽Content type: Discussion
news.ycombinator.com路路Hacker News

someone actually leaked the Miasma supply chain attack toolkit source code on github

聽馃惂Linux Security
safedep.io路路Hacker News, r/programming

Over 100 NPM, PyPI Packages Hit in New Shai-Hulud Supply Chain Attacks

聽馃捇Programming
securityweek.com路

New IronWorm Malware Hits 36 Packages In npm Supply-Chain Attack

聽馃捇Programming
it.slashdot.org路
Less-relevant results

You can fork a package, but can you own it?

聽馃捇Programming
event-driven.io路

Keyboard Shortcuts

Navigation

Next / previous item
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Browse
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help