Blogs

Protect your code from the Polyfill supply chain attack

Semgrep

Over 100k websites use a CDN service, polyfill.io, that was delivering malicious JavaScript code.

Visit Site

Beyond vulnerabilities: Detect malicious dependencies in your supply chainSemgrep Detect Open Source Malware Attacks with Semgrep Supply ChainSemgrep Enterprise Scale Code Scanning: Semgrep Managed Scans Crossed 1 MILLION Weekly ScansSemgrep Fix What Matters, Faster: How Semgrep and Sysdig Are Unifying Security from Code to RuntimeSemgrep Finding vulnerabilities in modern web apps using Claude Code and OpenAI CodexSemgrep Code to cloud noise reduction - Prioritizing code security with Semgrep & WizSemgrep Docs-as-code solutions for API teams: how to choose the right platform in 2026Mintlify Mintlify Alternatives: What to Consider (and Why There's No True Substitute)Mintlify Build a Presentation Coaching Application with Recall - Deepgram Blog ⚡️Deepgram No Code Transcription: Simplifying Workflows with Deepgram and Make.comDeepgram Oso Unbundles Security AuthorizationThenewstack Empower Your Team with Policy as CodePulumi How We Eliminated Long-Lived CI Secrets Across 70+ ReposPulumi Five Years of Infrastructure as CodePulumi New Policy as Code Capabilities with CrossGuardPulumi Godoc: documenting Go code - The Go Programming LanguageGo Managing dependencies - The Go Programming LanguageGo How Hunch supercharged AI workflows with Modal SandboxesModal ESLINT_CONFIGURATIONVercel NO_EXTERNAL_CSS_AT_IMPORTSVercel