DEV Community

# supplychain

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Cordyceps and the pipeline attack surface we keep ignoring
leobaniak profile
Leo

Cordyceps and the pipeline attack surface we keep ignoring

#cicdsecurity #supplychain #runners #vulnerability
Comments
3 min read
Why MLCC Lead Times Are Blowing Up in 2026 (And How to Design Around It)
lucas_ding profile

Why MLCC Lead Times Are Blowing Up in 2026 (And How to Design Around It)

#electronics #hardware #pcb #supplychain
Comments
3 min read
Aikido buys Root to patch open source in place, without the upgrade dance
leobaniak profile
Leo

Aikido buys Root to patch open source in place, without the upgrade dance

#supplychain #cve #dependencies #security
Comments
4 min read
The Supply Chain Attack Vector Everyone Is Ignoring in AI Agents
szybnev profile

The Supply Chain Attack Vector Everyone Is Ignoring in AI Agents

#ai #programming #supplychain #attack
Comments
3 min read
GitHub Actions hands fork triggers a read-only cache token
leobaniak profile
Leo

GitHub Actions hands fork triggers a read-only cache token

#githubactions #cache #supplychain #leastprivilege
Comments
4 min read
CI is the wrong place to first hear about your npm dependencies
leobaniak profile
Leo

CI is the wrong place to first hear about your npm dependencies

#supplychain #shiftleft #node #npm
Comments
3 min read
PostCSS Adopted Staged Publishing. 685M Weekly Downloads Now Gated.
piiiico profile
Pico

PostCSS Adopted Staged Publishing. 685M Weekly Downloads Now Gated.

#npm #security #supplychain #javascript
2
Comments 1
2 min read
Come ragiona un hacker (e cosa cambia per chi costruisce prodotti web)
frontendfacile profile

Come ragiona un hacker (e cosa cambia per chi costruisce prodotti web)

#socialengineering #phishing #supplychain #securitymindset
Comments
4 min read
Cilium publishes its CI hardening playbook, gaps and all
leobaniak profile
Leo

Cilium publishes its CI hardening playbook, gaps and all

#cicdsecurity #supplychain #credentials #sigstore
Comments
3 min read
SP Page Builder ships a one-file controller patch in 6.6.2, and the locked support thread is a reminder that patching isn't cleanup
leobaniak profile
Leo

SP Page Builder ships a one-file controller patch in 6.6.2, and the locked support thread is a reminder that patching isn't cleanup

#joomla #sppagebuilder #cms #supplychain
Comments
6 min read
npm freezes high-impact maintainer accounts for 72 hours after a sensitive change
leobaniak profile
Leo

npm freezes high-impact maintainer accounts for 72 hours after a sensitive change

#npm #supplychain #accounttakeover #security
Comments
4 min read
A Rogue Registry in My Own Backyard: Anatomy of a Two-Line Supply Chain Attack
sebs profile

A Rogue Registry in My Own Backyard: Anatomy of a Two-Line Supply Chain Attack

#npm #security #supplychain
1
Comments
6 min read
What 5 Years on an Amazon Dock Taught Me About Barcodes
jamiepark-design profile

What 5 Years on an Amazon Dock Taught Me About Barcodes

#barcode #warehouse #logistics #supplychain
Comments
2 min read
Homebrew 6.0.0 turns third-party taps into an opt-in trust list
leobaniak profile
Leo

Homebrew 6.0.0 turns third-party taps into an opt-in trust list

#homebrew #supplychain #packagemanagers #cicd
Comments
3 min read
Your auth library's maintainer is an agent who never sleeps
colonistone_34 profile

Your auth library's maintainer is an agent who never sleeps

#security #ai #supplychain #devops
Comments
5 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.