SHA1-Hulud, npm Supply Chain Incident
Snyk identified a new supply chain attack in the npm ecosystem, referred to as SHA1-Hulud.
How We Eliminated Long-Lived CI Secrets Across 70+ ReposPulumi
NO_EXTERNAL_CSS_AT_IMPORTSVercel
How Mondelez Accelerates Supply Chain Training Across 150+ Global Manufacturing PlantsSynthesia
Announcing Socket Certified Patches: One-Click Fixes for Vulnerable DependenciesSocket
Updated and Ongoing Supply Chain Attack Targets CrowdStrike npm PackagesSocket
upm Launches as a Fast, Tiny Package Manager Written in TypeScriptSocket
Happy Birthday, Shai-HuludSocket
Supply Chain Attacks and Cloud Native: What You Need to KnowThenewstack
Policy as Code for Any Cloud ProviderPulumi
What is Root Cause Analysis?Datadoghq
Webinar Recap: Webinar Recap: Securing the Software Supply Chain with Docker BusinessDocker
How to Protect Your Projects from the Risks of Deprecated npm PackagesSocket
When "Everything" Becomes Too Much: The npm Package Chaos of 2024Socket
Popular npm Packages in the keyv and Cacheable Namespaces Compromised in Active Supply Chain AttackSocket
