Software Supply Chain

Feeds to Scour
SubscribedAll
Scoured 195 posts in 7.7 ms

Ruby's Bundler adds a cooldown feature

 💻Programming
lwn.net
·

Eliminating long-lived credentials with trusted publishing

 🐧Linux Security
lwn.net
·
Less-relevant results

Microsoft pulled 73 GitHub repos after malware attack — but still won’t say who’s compromised

 🐧Linux Security
thenewstack.io·

Miasma Malware Hits 32 Red Hat Packages via Compromised GitHub Account

 🐧Linux Security
hackread.com·

Minimus Announces General Availability of Supply Chain Protection and minicli

 🐧Linux Security
nextbigfuture.com·

If You Use Claude or Gemini, This Microsoft Breach Means Your Data Is at Risk

 🐧Linux Security
scienspire.com··Hacker News

Two-Thirds of Open Source Community Unaware of Cyber Resilience Act

 🐧Linux Security  Content type: News
infosecurity-magazine.com·

brew trust

 💻Programming
perrotta.dev·

Miasma worms its way onto GitHub as attack kit goes open source

 🐧Linux Security  Content type: News
theregister.com··Hacker News

Pythagora-io/gpt-pilot Compromised on GitHub - Shai-Hulud Credential Stealer Blocked by Python Linter

 🐧Linux Security  Content type: Blog
stepsecurity.io··Hacker News

Owning Your Dependencies

 💻Programming  Content type: News  Content type: Blog
thestoicprogrammer.substack.com··Substack, r/programming

ICYMI: May 2026 @AWS Security

 🐧Linux Security  Content type: Blog
aws.amazon.com·

Securing CI/CD for an open source project: Controlling who runs what

 🐧Linux Security  Content type: Blog
cncf.io·

When LLMs Invent Rust Crates: An Empirical Study of Hallucination Patterns and Mitigation

 🐧Linux Security  Content type: Academic
arxiv.org·

Anatomy of a Job Interview Supply Chain Attack

 ⚖️Work-Life Balance
lmgsecurity.com·

Lazarus Group's Latest: Brandjacking Campaign on npm

 🐧Linux Security
malware.news·

For the 2nd time in weeks, Microsoft packages laced with credential stealer

 🐧Linux Security  Content type: News
arstechnica.com··Lobsters, Hacker News

Week 23 – 2026

 🐧Linux Security
thisweekin4n6.com·

Finally, a secure Nixpkgs for the enterprise: an update on Determinate Secure Packages

 🐧Linux Security  Content type: Blog
determinate.systems··Hacker News, r/NixOS

The runtime-portable TypeScript framework with supply-chain-aware defaults

 💻Programming
daloyjs.dev··DEV
Sign up or log in to see more results
Sign UpLogin

Keyboard Shortcuts

Navigation

Next / previous item
j/k
Open post
oorEnter
Preview post
v

Post Actions

Love post
a
Like post
l
Dislike post
d
Undo reaction
u
Save / unsave
s

Recommendations

Add interest / feed
Enter
Not interested
x

Go to

Home
gh
Interests
gi
Feeds
gf
Likes
gl
History
gy
Changelog
gc
Settings
gs
Browse
gb
Search
/

General

Show this help
?
Submit feedback
!
Close modal / unfocus
Esc

Press ? anytime to show this help