/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 securitylabs.datadoghq.com
Learnings from recent npm supply chain compromises | Datadog Security Labs
| | words.filippo.io
A Retrospective Survey of 2024/2025 Open Source Supply Chain Compromises
1.9 parsecs away

Travel
| | Project compromises have common root causes we can mitigate: phishing, control handoff, and unsafe GitHub Actions triggers.
| | blog.aquasec.com
A Popular npm Library Compromised in a Supply Chain Attack: What to Do
1.7 parsecs away

Travel
| | In the latest npm supply chain attack, a popular library was compromised, here are the explanation of the attack flow and mitigation recommendations
| | thehackernews.com
Shai-Hulud v2 Spreads From npm to Maven, as Campaign Exposes Thousands of Secrets
1.9 parsecs away

Travel
| | Shai-Hulud v2 breached npm and Maven, impacting 28,000+ repos and leaking 11,858 secrets.
| | socket.dev
Supply Chain Attack Detected in Solana's web3.js Library - S...
3.2 parsecs away

Travel
| A supply chain attack has been detected in versions 1.95.6 and 1.95.7 of the popular @solana/web3.js library.