2 articles and related resources
A 42-line npm package was exploited to infiltrate multiple production environments, highlighting critical supply chain vulnerabilities.
The 'Mini Shai-Hulud' campaign compromised Mistral AI and Tan ... , exposing sensitive credentials and highlighting software supply chain vulnerabilities.
Researchers unveil 'Java-Class-Hijack,' a novel supply chain attack exploiting Java's dependency resolution and classloading, posing significant risks to applic
Recent research reveals the risks of cascading vulnerabilities in software supply chains, emphasizing the need for comprehensive security measures.
The Shai-Hulud worm compromised over 1,000 npm packages, exposing 25,000 GitHub repositories, highlighting critical supply chain security vulnerabilities.