Blogs

Client SDKs Can Be a Supply Chain Blind Spot

Semgrep

A compromised Telnyx Python SDK reveals a critical client SDK security gap in modern supply chain dependencies.

Visit Site

Beyond vulnerabilities: Detect malicious dependencies in your supply chainSemgrep Detect Open Source Malware Attacks with Semgrep Supply ChainSemgrep Can LLMs Detect IDORs? Understanding the Boundaries of AI ReasoningSemgrep London calling: Highlights from the 2025 cloud & cyber security expoSemgrep Boosting Security Scan Performance for Monorepos with Multicore Parallel ProcessingSemgrep Beyond Benchmarks: How Semgrep Redefines Javascript SecuritySemgrep Breaking down common documentation mistakesMintlify Calling Your Video Game With Your Phone: Part 1Deepgram The Best (and Worst?) of Voice AI TechnologyDeepgram How to Conduct an AI Agent Security Audit [+ Checklist]Zapier How a marketing agency increased client conversions 35% with Zapier CanvasZapier How to implement AI training for employeesZapier 7 ways to use Zapier's Zendesk integrationZapier How to connect Google Sheets to NotionZapier How Argo CD and OpenShift Enable GitOps for DevelopersThenewstack When CI Meets CD: Deliver With ConfidenceThenewstack OData or GraphQL? The Best Tech for Developing an API Is Neither or Both!Thenewstack Pulumi ESC and External Secrets Operator: The Perfect Solution for TodayPulumi How We Eliminated Long-Lived CI Secrets Across 70+ ReposPulumi Introducing New Slimmer Docker ImagesPulumi