Supplychain

👋 Sign in for the ability to sort posts by relevant, latest, or top.

Jason Miller

Oct 14

Same Extension ID, Different Publisher: What Actually Installs When Your Team Moves to Cursor

#supplychain #secrets #aiagents

3 min read

Rohit Bhadani

Oct 14

GhostAction Has Hit GitHub Repos Three Times Since 2025, and It Never Actually Stopped

#security #github #supplychain #devops

4 min read

challan116-ux

Oct 14

How Do You Migrate EDI Without Breaking Your Trading Partners? A Cutover Playbook

#edi #api #integration #supplychain

4 min read

yutianle

Oct 14

Typosquatting and Slopsquatting: Defending the Package Install Path

#supplychain #npm #pypi #cicd

4 min read

Jeremy Longshore

Oct 14

Verify Audit Evidence with a Signed Payload, Not by Format

#audit #evidence #supplychain #signedpayload

9 min read

Seven Billion Analytics

Oct 14

MRP Is Correct and Still Wrong: A Worked Example

#erp #supplychain #manufacturing #algorithms

2 min read

Hacks.gr

Oct 13

New stricter rules from GitHub for code packages after security investigation

#github #npm #supplychain #opensource

2 min read

yutianle

Oct 13

57,029 Harbor Registries Online: An Artefact Store Is a Deployment Authority

#harbor #exposure #supplychain

3 min read

hao li

Oct 13

1 in 5 AI-Suggested Packages Doesn't Exist — I Built a Scanner for That

#python #security #ai #supplychain

2 min read

challan116-ux

Oct 13

Your First EDI Mandate Does Not Need 90 Days: What Actually Slows SMB Onboarding Down

#edi #api #integration #supplychain

4 min read

jamilxt

Oct 13

The Shai-Hulud Worm Now Steals Your AI Agent Credentials: A 20-Minute npm Audit

#security #npm #supplychain #ai

8 min read

yutianle

Oct 13

Nexus Repository Manager: 112,040 title matches against 185 fingerprints

#supplychain #repositorymanager #exposuremanagement

2 min read

Dwayne McDaniel for GitGuardian

Oct 13

GhostAction Returns: 772 Repos Hit in New GitHub Actions Wave

#security #github #supplychain #cicd

7 min read

Chris Sellers

Oct 12

A traceability import should never guess a missing lot code

#dataengineering #api #python #supplychain

4 min read

OnaEiuspkz

Oct 12

CVE-2026-82329 and the Special Problem of Artifact Repositories

#jfrog #artifactory #authenticationbypass #supplychain

2 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.