1. Two popular Rust crates arrayref and append-only-vec compromised in Supply Chain Attack incident | 2026-08-20 00:00 | aikido.dev | original ↗ | #supply-chain | #threat-intelligence | #rust
2. Our Approach to Coordinated Vulnerability Disclosure blog | 2025-12-05 00:00 | depthfirst.com | original ↗ | #supply-chain | #vulnerability-research | #vulnerability-disclosure
3. Adding build provenance to Homebrew blog | 2023-11-06 13:00 | blog.trailofbits.com | original ↗ | #ci-cd | #macos | #supply-chain-security
4. A Need for Vigilance in Open Source Software: Dolibarr CRM Advisory Release blog | 2019-07-31 00:00 | bishopfox.com | original ↗ | #rce | #xss | #responsible-disclosure