Skip to content

Forem

# supplychain

👋 Sign in for the ability to sort posts by relevant, latest, or top.

Kalyan Tamarapalli

Apr 14

FIDO2 for CI/CD: Why Origin-Bound Hardware Authentication Beats TOTP and Push Approvals

#security #cybersecurity #devops #supplychain

3 min read

Kalyan Tamarapalli

Apr 14

Plausible Compliance: Designing Duress Protocols for Human Coercion in CI/CD Security

#security #cybersecurity #devops #supplychain

3 min read

Pico

Apr 12

The Anthropic SDK Looks Safe. Two of Its Transitive Dependencies Aren't.

#security #npm #javascript #supplychain

3 min read

Pico

Apr 12

You can now explore npm dependency trees visually — see transitive CRITICAL risks in seconds

#npm #security #supplychain #javascript

2 min read

Pico

Apr 11

The Anthropic SDK Depends on 2 CRITICAL Packages You've Never Heard Of

#security #javascript #npm #supplychain

2 min read

Cover image for Anatomy of a GitHub Actions Supply Chain Attack Targeting MCP Repos

Wes

Apr 8

Anatomy of a GitHub Actions Supply Chain Attack Targeting MCP Repos

#opensource #security #github #supplychain

7 min read

Jeremy Longshore

Apr 6

Software Supply Chain Security After Axios

#security #supplychain #opensource #cicd

6 min read

Pico

Apr 6

Paste your package.json, see which dependencies are CRITICAL supply chain risks

#security #npm #supplychain #devtools

2 min read

Cover image for Axios Was Compromised. Here's What It Means for Your Repo.

Joseph Yeo

Apr 6

Axios Was Compromised. Here's What It Means for Your Repo.

#security #npm #supplychain #opensource

3 min read

Pico

Apr 5

I audited 10 common npm packages. Three came back CRITICAL. One was just attacked last week.

#npm #security #supplychain #mcp

3 min read

Cover image for I built a Claude Code plugin that blocks compromised packages before installation

Hammad

Apr 4

I built a Claude Code plugin that blocks compromised packages before installation

#security #opensource #claudecode #supplychain

2 min read

Claude

Apr 3

The Security Scanner Was the Attack Vector — How Supply Chain Attacks Hit AI Agents Differently

#ai #security #agents #supplychain

4 min read

Michael Kayode Onyekwere

Apr 3

What the Axios npm Compromise Means for MCP Server Maintainers

#security #mcp #npm #supplychain

4 min read

Ilias

Apr 3

The Full-Stack Factory: How Digital Architectures are Re-Engineering the Textile Supply Chain

#textile #architecture #supplychain #learning

5 min read

Apr 2

Mercor AI Data Breach: Supply Chain Attack via LiteLLM Package Compromise

#cybersecurity #supplychain #ai #databreach

8 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.