Supplychainsecurity

👋 Sign in for the ability to sort posts by relevant, latest, or top.

Leo

Jul 3

The Codecov bash uploader is five years old, and the class of attack still lives in your pipeline

#supplychainsecurity #codecov #cisecrets #bashuploader

3 min read

Uhltak Therestismysecret

Jul 2

Supply Chain Attacks verstehen: Praxisnahe Schutzstrategien für moderne IT-Infrastrukturen

#supplychainsecurity #softwaredependencies #cybersecurity #devsecops

6 min read

Maksim Danilchenko

Jun 29

Perplexity Bumblebee Review: The Supply Chain Scanner Your Dev Machine Needs

#bumblebee #perplexity #supplychainsecurity #go

11 min read

eyanpen

Jun 29

Design Trade-offs: Why Hermes (and Many Popular Agents) Don't Use LangChain / LangGraph

#agentloop #langchain #langgraph #supplychainsecurity

8 min read

DarkEdges

Jun 28

Building CIS-Hardened, SBOM-Attested CentOS 9 Golden Images with Packer, QEMU and PingAccess - entirely on WSL2

#devsecops #packer #supplychainsecurity #linux

6 min read

The Cyber Sidekick

Jun 17

The Atomic Arch Supply Chain Attack: What 1,500 Compromised AUR Packages Mean for Cloud-Native CI/CD Security

#supplychainsecurity #containersecurity #archlinux #sbom

4 min read

Toni Antunovic

Jun 11

Miasma Worm: How Opening a Repo in Claude Code Became a Credential Theft Vector

#security #supplychainsecurity #claudecode #devsecops

9 min read

Toni Antunovic

Jun 9

The Gemini CLI CVSS 10 Attack: How a GitHub Issue Became a Supply Chain Weapon

#security #promptinjection #supplychainsecurity #devsecops

6 min read

Uhltak Therestismysecret

Jun 4

Supply Chain Attacks: Schutz vor bösartigen Abhängigkeiten im IT-Betrieb

#supplychainsecurity #abhaengigkeiten #devsecops #softwaresupplychain

5 min read

ThankGod Chibugwum Obobo

Jun 21

Dependency Auditing at Scale: How to Automate Supply Chain Security with Dependabot and Snyk

#supplychainsecurity #dependabot #snyk #vulnerabilitymanagement

8 min read

Jay Grider

May 21

Socket: Secure Your JavaScript Supply Chain Against AI Threats

#supplychainsecurity #javascript #aithreats #sbom

6 min read

Toni Antunovic

May 14

What LucidShark Would Have Caught Before the TanStack Attack Landed

#supplychainsecurity #sca #tanstack #devsecops

7 min read

Toni Antunovic

May 16

Clinejection: When Your AI Coding Tool Became the Weapon

#promptinjection #supplychainsecurity #devsecops #githubactions

9 min read

Toni Antunovic

May 21

Slopsquatting: The Attacker Playbook for AI-Hallucinated Package Names

#slopsquatting #supplychainsecurity #aicodingagents #npmsecurity

10 min read

Sri Sai Venkata Kasi Subbarayudu Kompella

Jun 8

Signing Container Images with Cosign

#supplychainsecurity #kubernetes #devops #containers

15 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.

DEV Community

# supplychainsecurity

The Codecov bash uploader is five years old, and the class of attack still lives in your pipeline

Supply Chain Attacks verstehen: Praxisnahe Schutzstrategien für moderne IT-Infrastrukturen

Perplexity Bumblebee Review: The Supply Chain Scanner Your Dev Machine Needs

Design Trade-offs: Why Hermes (and Many Popular Agents) Don't Use LangChain / LangGraph

Building CIS-Hardened, SBOM-Attested CentOS 9 Golden Images with Packer, QEMU and PingAccess - entirely on WSL2

The Atomic Arch Supply Chain Attack: What 1,500 Compromised AUR Packages Mean for Cloud-Native CI/CD Security

Miasma Worm: How Opening a Repo in Claude Code Became a Credential Theft Vector

The Gemini CLI CVSS 10 Attack: How a GitHub Issue Became a Supply Chain Weapon

Supply Chain Attacks: Schutz vor bösartigen Abhängigkeiten im IT-Betrieb

Dependency Auditing at Scale: How to Automate Supply Chain Security with Dependabot and Snyk

Socket: Secure Your JavaScript Supply Chain Against AI Threats

What LucidShark Would Have Caught Before the TanStack Attack Landed

Clinejection: When Your AI Coding Tool Became the Weapon

Slopsquatting: The Attacker Playbook for AI-Hallucinated Package Names

Signing Container Images with Cosign