Supplychain - DEV Community

Skip to content

DEV Community

👋 Sign in for the ability to sort posts by relevant, latest, or top.

kotakanbe

Oct 26

A maintained package can still ship malware. What a health check can and can't see.

#security #opensource #npm #supplychain

11 min read

Oct 26

A self-hosted CI runner is a credential store that also executes whatever the repository says

#cicd #supplychain #hardening

4 min read

Oct 25

An unsigned SBOM answers a question nobody asked

#supplychain #sbom #provenance

3 min read

Oct 25

The EDI 860, Decoded: A Purchase Order Change Is a New Promise, Not an Edit

#edi #api #integration #supplychain

5 min read

Mithilesh Parmar

Oct 25

I left software to run a psyllium mill, so I shipped a pip package for ingredient buyers

#python #cli #opensource #supplychain

2 min read

OnaEiuspkz

Oct 24

When the Server Is the Attacker: curl CVE-2026-92392 and the Embedded libcurl You Forgot About

#curl #http2 #useafterfree #supplychain

4 min read

Oct 24

81,570 Nexus Titles Against 33,873 Fingerprints: The Artefact Store Everything Builds From

#zoomeye #nexus #artifactrepository #supplychain

3 min read

Oct 24

The EDI 852, Decoded: Product Activity Is How a Retailer Tells You What Actually Sold

#edi #api #integration #supplychain

5 min read

Hacks.gr

Oct 24

Hacker breached LiteLLM and uploaded malicious software update

#litellm #supplychain #python #pypi

2 min read

Oct 24

Harbor's Search API Answered Without Authorisation, and the Vendor Called It a Feature

#harbor #cve202246463 #registryenumeration #supplychain

3 min read

Oct 23

Beyond Barcode Scanning: How AI and Machine Vision Improve Warehouse Picking

#ai #robotics #automation #supplychain

5 min read

Oct 23

Eight Intermediates and a Key That Was Just a Number: What the eMudhra CA Compromise Means for Non-Browser Clients

#pki #certificateauthority #truststore #supplychain

3 min read

relayshieldadmin

Oct 23

Two Worms, One Blind Spot

#malware #supplychain #npm #security

3 min read

yutianle

Oct 23

The .pth file that runs before your code: lessons from the LiteLLM 1.107.0 compromise

#supplychain #litellm #pypi #pthfile

5 min read

Oct 22

Six Expired Domains Can Hijack Your AI Agents: Notes From a 15,465-Server MCP Audit

#apiauth #aiagents #supplychain #soc2

3 min read

👋 Sign in for the ability to sort posts by relevant, latest, or top.