#supplychain

3 articles tagged with “supplychain”

debuggingMay 24, 2026

How to Defend Your Codebase Against GitHub Repo Poisoning Attacks

A practical guide to defending your codebase against GitHub repo poisoning and supply chain attacks, with concrete steps for auditing, locking, and verifying dependencies.

securitygithubdevops

comparisonMay 24, 2026

Bumblebee vs OSV-Scanner: Two Takes on Supply Chain Scanning

Comparing Perplexity's new on-disk scanner Bumblebee with manifest-based tools like OSV-Scanner and Snyk for supply chain security triage.

securitysupplychaindevops

tutorialApril 1, 2026

axios Got Hacked. If You Ran npm install Yesterday, Read This Now.

axios. The HTTP client thats in basically every JavaScript project on earth. 100 million weekly downloads. Present in roughly 80% of cloud environment

securitynpmsupplychain