DEV Community

#supplychain

Posts

đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.
Brevo: A Cloudflare Worker That Rewrote a Marketing Platform in Flight
bianliang profile

Brevo: A Cloudflare Worker That Rewrote a Marketing Platform in Flight

#supplychain #cdn #wordpress #clickfix
Comments
2 min read
yarn.lock: may the `--force` be with you
antongolub profile

yarn.lock: may the `--force` be with you

#javascript #security #npm #supplychain
1
Comments 1
14 min read
yarn.lock: you can't `sed` a graph
antongolub profile

yarn.lock: you can't `sed` a graph

#javascript #npm #supplychain #security
1
Comments 1
10 min read
yarn audit [still does not] fix
antongolub profile

yarn audit [still does not] fix

#javascript #security #tools #supplychain
1
Comments
9 min read
Verdaccio on 3,336 hosts: private npm registries and the tokens they hand out
stark_zhuang_df5076f35c68 profile

Verdaccio on 3,336 hosts: private npm registries and the tokens they hand out

#security #zoomeye #exposure #supplychain
Comments 1
3 min read
Artifact Repositories Are Trust Anchors: Incident Response for a Compromised Build Pipeline
jeffreyciend profile

Artifact Repositories Are Trust Anchors: Incident Response for a Compromised Build Pipeline

#security #supplychain #incidentresponse #artifactory
Comments
3 min read
GitHub got pwned through one VSCode extension. 3,800 repos.
ritabratamaiti profile

GitHub got pwned through one VSCode extension. 3,800 repos.

#github #vscode #security #supplychain
Comments
5 min read
CVE-2026-96365 and the Contribution Model: Why Drupal Site Owners Carry the Patch Burden
onaeiuspkz profile

CVE-2026-96365 and the Contribution Model: Why Drupal Site Owners Carry the Patch Burden

#security #drupal #cve202696365 #supplychain
1
Comments
2 min read
The JFrog Artifactory authentication bypass: when an empty signing key becomes an admin token
stark_zhuang_df5076f35c68 profile

The JFrog Artifactory authentication bypass: when an empty signing key becomes an admin token

#supplychain #artifactrepository #authenticationbypass #jfrog
Comments
3 min read
The Credential Relay Economy: How Supply Chain Attacks Chain Through SaaS Vendors
jeffreyciend profile

The Credential Relay Economy: How Supply Chain Attacks Chain Through SaaS Vendors

#supplychain #credentials #saassecurity
Comments
2 min read
Software Supply Chains Have an Address: Mapping Exposed Artifact Repositories with ZoomEye
jeffreyciend profile

Software Supply Chains Have an Address: Mapping Exposed Artifact Repositories with ZoomEye

#supplychain #attacksurface #zoomeye #exposuremanagement
Comments
3 min read
The Artifactory Token Chain: Why Build Repositories Are a Credential Store
kozhevniko profile

The Artifactory Token Chain: Why Build Repositories Are a Credential Store

#supplychain #artifactrepository #authenticationbypass #devsecops
Comments
4 min read
The Artifact Repository Is a Trust Root: Reading the JFrog Artifactory Authentication Bypass
jeffreyciend profile

The Artifact Repository Is a Trust Root: Reading the JFrog Artifactory Authentication Bypass

#supplychain #devops #authentication #artifactrepository
Comments
4 min read
The Shai-Hulud npm worm showed that opening a folder is enough to run code
bianliang profile

The Shai-Hulud npm worm showed that opening a folder is enough to run code

#supplychain #npm #developertooling #credentialtheft
Comments
3 min read
Print Servers and Artifact Repositories: Measuring Two Overlooked Attack Surfaces
kozhevniko profile

Print Servers and Artifact Repositories: Measuring Two Overlooked Attack Surfaces

#security #zoomeye #exposure #supplychain
Comments
3 min read
đź‘‹ Sign in for the ability to sort posts by relevant, latest, or top.