A Popular npm Library Compromised in a Supply Chain Attack
Andrew Akers November 11, 2021 https://www.aquasec.com/cloud-native-academy/application-security/cyber-kill-chain/In late October, a supply chain attack affected a popular npm library, ua-parser-js, which put many companies at risk of compromise.
A Brief Guide to Supply Chain Security Best PracticesAquasec
Deceptive Deprecation: The Truth About npm Deprecated PackagesAquasec
New npm Flaws Let Attackers Better Target Packages for Account TakeoverAquasec
Threat Alert: Private npm Packages Disclosed via Timing AttacksAquasec
Threat Alert: TeamTNT Pwn Campaign Against Docker and K8s EnvironmentsAquasec
Malware Forensic Analysis: Capturing What Attackers Leave BehindAquasec
Video: Building a Live Transcription Badge With Deepgram - Deepgram Blog ⚡️Deepgram
Automate Audio Transcription with Zapier + DeepgramDeepgram
Grafana Is Not Worried About AWS CommercializationThenewstack
AWS Enterprise Container Management with PulumiPulumi
How We Eliminated Long-Lived CI Secrets Across 70+ ReposPulumi
NO_EXTERNAL_CSS_AT_IMPORTSVercel
How Mondelez Accelerates Supply Chain Training Across 150+ Global Manufacturing PlantsSynthesia
Anthropic Identifies Biased Reasoning and Recklessness as Drivers of Claude’s PyPI AttackSocket
Announcing Socket Certified Patches: One-Click Fixes for Vulnerable DependenciesSocket
Updated and Ongoing Supply Chain Attack Targets CrowdStrike npm PackagesSocket
upm Launches as a Fast, Tiny Package Manager Written in TypeScriptSocket
Happy Birthday, Shai-HuludSocket
GlassWorm Loader Hits Open VSX via Developer Account CompromiseSocket
Supply Chain Attacks and Cloud Native: What You Need to KnowThenewstack
