Explore >> Select a destination
|
You are here 
|
blog.gitguardian.com | ||
| | | | |
www.backslash.security
|
|
| | | | | A major npm supply-chain incident surfaced last week. Over 800 packages were poisoned, leading to more than 25,000 GitHub repositories being populated with stolen secrets. Projects linked to Zapier, ENS Domains, PostHog, and Postman were briefly affected. | |
| | | | |
www.sysdig.com
|
|
| | | | | A new supply chain attack against the NPM repository is using novel, self-propagating malware (also known as a worm) to continue spreading itself. | |
| | | | |
thehackernews.com
|
|
| | | | | Malicious npm postmark-mcp v1.0.16 backdoored MCP server stole emails from 1,643 downloads. | |
| | | | |
iliana.fyi
|
|
| | | [AI summary] The article critiques the use of the 'software supply chain' metaphor in open source maintenance, arguing that it dehumanizes the work and creates unnecessary burdens on hobbyist maintainers. | ||
