DEV Community

#supplychain

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
The Streak Continues: Four More Supply Chain Attacks Hit npm and PyPI
dwayne_mcdaniel profile

The Streak Continues: Four More Supply Chain Attacks Hit npm and PyPI

#security #supplychain #npm #python
Comments
7 min read
Stop Slopsquatting With a CI Gate, Not a Better Prompt
jaryn_123 profile

Stop Slopsquatting With a CI Gate, Not a Better Prompt

#security #ai #supplychain #devsecops
Comments
4 min read
Image verification, one layer below admission
leobaniak profile
Leo

Image verification, one layer below admission

#kubernetes #supplychain #policy #attestations
Comments
2 min read
PyPI stops accepting late file uploads to releases older than 14 days
leobaniak profile
Leo

PyPI stops accepting late file uploads to releases older than 14 days

#supplychain #pypi #python #dependabot
Comments
3 min read
Agentic Supply Chain Vulnerabilities: Your Agent Is Only as Secure as Its Weakest Plugin (ASI04)
maishsk profile

Agentic Supply Chain Vulnerabilities: Your Agent Is Only as Secure as Its Weakest Plugin (ASI04)

#aws #security #supplychain #ai
1
Comments
10 min read
xAI publishes Grok Build's source after the coding agent was caught siphoning SSH keys
leobaniak profile
Leo

xAI publishes Grok Build's source after the coding agent was caught siphoning SSH keys

#codingagents #supplychain #security #sshkeys
Comments
3 min read
Mini Shai-Hulud: the tj-actions memory-dump script, reused fourteen months later
eldor_zufarov_1966 profile

Mini Shai-Hulud: the tj-actions memory-dump script, reused fourteen months later

#devsecops #security #supplychain #cicd
Comments
2 min read
The workstation is in scope now
leobaniak profile
Leo

The workstation is in scope now

#supplychain #developerworkstation #githubactions #vscode
Comments
3 min read
Clinejection: How a GitHub Issue Title Compromised an AI Coding Assistant Used by 5M Developers
eldor_zufarov_1966 profile

Clinejection: How a GitHub Issue Title Compromised an AI Coding Assistant Used by 5M Developers

#appsec #supplychain #devsecops #ai
Comments
3 min read
GitLab tries to auto-fix the transitive-dep problem it keeps quantifying
leobaniak profile
Leo

GitLab tries to auto-fix the transitive-dep problem it keeps quantifying

#gitlab #supplychain #dependencies #autoremediation
Comments
5 min read
Cordyceps: when a stranger's pull request runs as a maintainer
leobaniak profile
Leo

Cordyceps: when a stranger's pull request runs as a maintainer

#supplychain #githubactions #workflowsecurity #pullrequesttarget
Comments
3 min read
Crunchyroll Hackeada: 100GB Robados vĂ­a un Empleado de Telus
alejandxr profile

Crunchyroll Hackeada: 100GB Robados vĂ­a un Empleado de Telus

#breach #supplychain #streaming #sony
Comments
5 min read
Inside the Chain: the tj-actions compromise wasn't one incident — it was three
eldor_zufarov_1966 profile

Inside the Chain: the tj-actions compromise wasn't one incident — it was three

#devsecops #security #supplychain #cicd
Comments
2 min read
Booking.com Breach: When the Vendor Chain Becomes the Attack Surface
alejandxr profile

Booking.com Breach: When the Vendor Chain Becomes the Attack Surface

#breach #booking #vendorchain #supplychain
1
Comments
2 min read
Dependabot learns to wait: version-update PRs now sit for three days by default
leobaniak profile
Leo

Dependabot learns to wait: version-update PRs now sit for three days by default

#dependabot #github #supplychain #packageupdates
Comments
4 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.