1.npm v12’s Biggest Security Change: From Implicit to Explicit Trustblog | 2026-06-18 14:15 | jfrog.com | Original ↗ | .md | #supply-chain | #npm | #javascript
2.Practical Package Security: The Unofficial Guideblog | 2026-05-04 14:00 | wiz.io | Original ↗ | .md | #supply-chain | #devsecops | #npm
3.Catching malicious package releases using a transparency logblog | 2025-12-12 12:00 | blog.trailofbits.com | Original ↗ | .md | #supply-chain | #threat-detection | #sigstore
4.You're Invited: Delivering malware via Google Calendar invites and PUAsblog | 2025-05-13 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #malware | #npm
5.Why Lockfiles Matter for Supply Chain Securityblog | 2025-04-01 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #dependency-management | #npm