1.Aikido funds Node.js securityblog | 2026-09-28 00:00 | aikido.dev | Original ↗ | .md | #bug-bounty | #aikido | #open-source-security
2.Two popular Rust crates arrayref and append-only-vec compromised in Supply Chain Attackincident | 2026-08-20 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #threat-intelligence | #rust
3.Our Approach to Coordinated Vulnerability Disclosureblog | 2025-12-05 00:00 | depthfirst.com | Original ↗ | .md | #supply-chain | #vulnerability-research | #vulnerability-disclosure
4.Adding build provenance to Homebrewblog | 2023-11-06 13:00 | blog.trailofbits.com | Original ↗ | .md | #ci-cd | #macos | #supply-chain-security
5.A Need for Vigilance in Open Source Software: Dolibarr CRM Advisory Releaseblog | 2019-07-31 00:00 | bishopfox.com | Original ↗ | .md | #rce | #xss | #responsible-disclosure