Explore >> Select a destination

You are here

 arstechnica.com
Go Module Mirror served backdoor to devs for 3+ years - Ars Technica
| | openssf.org
xz Backdoor CVE-2024-3094 - Open Source Security Foundation
43.5 parsecs away

Travel
| |
| | github.blog
Security best practices for authors of GitHub Actions - The GitHub Blog
47.6 parsecs away

Travel
| | Improve your GitHub Actions security posture by securing your source repository, protecting your maintainers, and making it easy to report security incidents.
| | blog.phylum.io
The xz/liblzma Compromise and Software Supply Chain Security
47.6 parsecs away

Travel
| | At the end of March 2024, a major software supply chain attack was identified: some upstream forks of the popular xz/liblzma library that underpins the massively popular OpenSSH Server was compromised. A rogue contributor appears to have worked to influence the maintainers of the library, adding in seemingly innocuous
| | openssf.org
The Open Source Software Security Mobilization Plan - Open Source Security Foundation
63.5 parsecs away

Travel
|