DEV Community

#supplychain

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
The EDI 990, Decoded: A Response to a Load Tender Is Where Capacity Actually Gets Committed

The EDI 990, Decoded: A Response to a Load Tender Is Where Capacity Actually Gets Committed

Comments
6 min read
A Practical Hunt Workflow for Malicious npm Packages and Their Infrastructure

A Practical Hunt Workflow for Malicious npm Packages and Their Infrastructure

Comments
3 min read
Reporting AI Supply-Chain Risk With Evidence Levels, Not Inflation

Reporting AI Supply-Chain Risk With Evidence Levels, Not Inflation

Comments
3 min read
NIKKE PC Launcher Supply Chain Attack: Mitigation Steps to Protect Users from Malware and Credential Theft

NIKKE PC Launcher Supply Chain Attack: Mitigation Steps to Protect Users from Malware and Credential Theft

1
Comments
11 min read
The AI Didn't Break In. Someone Opened the Door.

The AI Didn't Break In. Someone Opened the Door.

1
Comments
6 min read
The patch on top does not close the door below

The patch on top does not close the door below

3
Comments
5 min read
GitHub Actually Fixed SHA Pinning. I Wasn't Expecting That.

GitHub Actually Fixed SHA Pinning. I Wasn't Expecting That.

Comments
4 min read
Brick #1: Any Node Can Hand Off — Typed Participants in a Verifiable Supply Chain

Brick #1: Any Node Can Hand Off — Typed Participants in a Verifiable Supply Chain

Comments
6 min read
A tampered Claude Code extension, five broken coding-agent browsers, and agents nobody owns

A tampered Claude Code extension, five broken coding-agent browsers, and agents nobody owns

Comments
4 min read
Nix store signatures cover substitution trust, not every build input

Nix store signatures cover substitution trust, not every build input

Comments
2 min read
How to calculate how many cartons fit on a pallet (with a worked example)

How to calculate how many cartons fit on a pallet (with a worked example)

Comments
2 min read
Git submodules carry a second repository trust decision

Git submodules carry a second repository trust decision

Comments 1
3 min read
Pre-Shipment Inspections for Small Brands: What to Check Before You Pay the Balance

Pre-Shipment Inspections for Small Brands: What to Check Before You Pay the Balance

Comments
2 min read
A Terraform provider lock file is a checksum contract

A Terraform provider lock file is a checksum contract

Comments
3 min read
Slopsquatting: When Your AI Assistant Invents Packages and Attackers Register Them First

Slopsquatting: When Your AI Assistant Invents Packages and Attackers Register Them First

Comments
7 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.