Tag: supply chain - PGLinks

supply chain

Arch Linux AUR Hit By Another Wave Of Now More Sophisticated Malware Attack - Phoronix

https://www.phoronix.com/news/Arch-Linux-AUR-More-Malware

cyber linux security supply chain vulnerability

Added 6 days ago

Megalodon chums the waters in 5.5K+ GitHub repo poisonings

https://www.theregister.com/security/2026/05/22/megalodon-chums-the-waters-in-55k-github-repo-poisonings/5245342

compromise cyber github incident security supply chain

Added 3 weeks ago

Mini Shai-Hulud Strikes Again: 317 npm Packages Compromised - Real-time Open Source Software Supply Chain Security

https://safedep.io/mini-shai-hulud-strikes-again-314-npm-packages-compromised/

compromise cyber incident npm security supply chain

Added 4 weeks ago

Postmortem: TanStack NPM supply-chain compromise

https://tanstack.com/blog/npm-supply-chain-compromise-postmortem

compromise cyber hackernews post-mortem security supply chain vulnerability

Added 1 month ago

[email protected] and [email protected] are compromised · Issue #10604 · axios/axios · GitHub

https://github.com/axios/axios/issues/10604#issuecomment-4160410930

open source security software supply chain vulnerability

Added 2 months ago

Judge blocks Pentagon effort to 'punish' Anthropic with supply chain risk label

https://www.cnn.com/2026/03/26/business/anthropic-pentagon-injunction-supply-chain-risk

anthropic claude code hackernews supply chain

Added 2 months ago

TeamPCP deploys CanisterWorm on NPM following Trivy compromise

https://www.aikido.dev/blog/teampcp-deploys-worm-npm-trivy-compromise

open source security supply chain

Added 2 months ago

Statement on the comments from Secretary of War Pete Hegseth

https://www.anthropic.com/news/statement-comments-secretary-war

anthropic claude code hackernews supply chain

Added 3 months ago

Sandwich Bill of Materials

https://nesbitt.io/2026/02/08/sandwich-bill-of-materials.html

cyber food funny hackernews security supply chain

Added 4 months ago

Supply Chain Vuln Compromised Core AWS GitHub Repos & Threatened the AWS Console

https://www.wiz.io/blog/wiz-research-codebreach-vulnerability-aws-codebuild

hackernews security supply chain vulnerability

Added 5 months ago

We all dodged a bullet - Xe Iaso

https://xeiaso.net/notes/2025/we-dodged-a-bullet/

phishing security supply chain vulnerability

Added 9 months ago

The Critical Flaw in CVE Scoring

https://www.darkreading.com/vulnerabilities-threats/critical-flaw-cve-scoring

cyber security supply chain

Added 10 months ago

Using artifact attestations to establish provenance for builds - GitHub Docs

https://docs.github.com/en/actions/security-for-github-actions/using-artifact-attestations/using-artifact-attestations-to-establish-provenance-for-builds#verifying-artifact-attestations-with-the-github-cli

github security supply chain

Added 1 year ago

AI-hallucinated code dependencies become new supply chain risk

https://www.bleepingcomputer.com/news/security/ai-hallucinated-code-dependencies-become-new-supply-chain-risk/

ai code dependencies import-20250527224135 supply chain vulnerability

Added 1 year ago

reviewdog/action-setup

https://www.wiz.io/blog/new-github-action-supply-chain-attack-reviewdog-action-setup

actions github import-20250527224135 security supply chain

Added 1 year ago

GitHub Actions now supports a digest for validating your artifacts at runtime - GitHub Changelog

https://github.blog/changelog/2025-03-18-github-actions-now-supports-a-digest-for-validating-your-artifacts-at-runtime/

import-20250527224135 security supply chain

Added 1 year ago

Recent improvements to Artifact Attestations - GitHub Changelog

https://github.blog/changelog/2025-02-18-recent-improvements-to-artifact-attestations/

github import-20250527224135 security supply chain

Added 1 year ago

Compromising OpenWrt Supply Chain via Truncated SHA-256 Collision and Command Injection - Flatt Secu

https://flatt.tech/research/posts/compromising-openwrt-supply-chain-sha256-collision/

cyber import-20250527224135 open source pentest security supply chain vulnerability

Added 1 year ago

Are we PEP 740 yet? 🔏

https://trailofbits.github.io/are-we-pep740-yet/

import-20250527224135 python security supply chain

Added 1 year ago

https://www.reuters.com/world/middle-east/dozens-hezbollah-members-wounded-lebanon-when-pagers-exploded-sources-witnesses-2024-09-17/

https://www.reuters.com/world/middle-east/dozens-hezbollah-members-wounded-lebanon-when-pagers-exploded-sources-witnesses-2024-09-17/

hardware import-20250527224135 security supply chain

Added 1 year ago

Artifact Attestations is generally available

https://github.blog/changelog/2024-06-25-artifact-attestations-is-generally-available/

github import-20250527224135 security supply chain

Added 1 year ago