Supplychain

👋 Sign in for the ability to sort posts by relevant, latest, or top.

Dwayne McDaniel for GitGuardian

Oct 13

GhostAction Returns: 772 Repos Hit in New GitHub Actions Wave

#security #github #supplychain #cicd

7 min read

Hacks.gr

Oct 13

New stricter rules from GitHub for code packages after security investigation

#github #npm #supplychain #opensource

2 min read

yutianle

Oct 13

57,029 Harbor Registries Online: An Artefact Store Is a Deployment Authority

#harbor #exposure #supplychain

3 min read

hao li

Oct 13

1 in 5 AI-Suggested Packages Doesn't Exist — I Built a Scanner for That

#python #security #ai #supplychain

2 min read

challan116-ux

Oct 13

Your First EDI Mandate Does Not Need 90 Days: What Actually Slows SMB Onboarding Down

#edi #api #integration #supplychain

4 min read

jamilxt

Oct 13

The Shai-Hulud Worm Now Steals Your AI Agent Credentials: A 20-Minute npm Audit

#security #npm #supplychain #ai

8 min read

yutianle

Oct 13

Nexus Repository Manager: 112,040 title matches against 185 fingerprints

#supplychain #repositorymanager #exposuremanagement

2 min read

Chris Sellers

Oct 12

A traceability import should never guess a missing lot code

#dataengineering #api #python #supplychain

4 min read

OnaEiuspkz

Oct 12

CVE-2026-82329 and the Special Problem of Artifact Repositories

#jfrog #artifactory #authenticationbypass #supplychain

2 min read

challan116-ux

Oct 12

3PL EDI, Decoded: The 940, 943, 944, 945, and 947 Warehouse Family

#edi #api #integration #supplychain

5 min read

kozhevniko

Oct 12

Build Infrastructure Is a Trust Anchor: Threat Modelling Exposed CI/CD and Artifact Repositories

#supplychain #cicd #artifactrepository #threatmodelling

3 min read

OnaEiuspkz

Oct 12

Six Hours, Thousands of Credentials: The Automation of Credential Harvesting

#aisecurity #credentialharvesting #cloudidentity #supplychain

3 min read

Hacks.gr

Oct 11

US prepares to ban electronic device testing in China

#fcc #hardware #supplychain #regulation

1 min read

yutianle

Oct 11

MemTensor: When an AI Memory Plugin Becomes the Credential Collector

#supplychain #npm #pypi #aiagents

2 min read

OnaEiuspkz

Oct 11

The npm Worm Era: Why Package Signatures Did Not Stop Shai-Hulud

#supplychain #npm #cicd #secrets

3 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.