1. npm v12’s Biggest Security Change: From Implicit to Explicit Trust blog | 2026-06-18 14:15 | jfrog.com | original ↗ | #supply-chain | #npm | #javascript
2. Practical Package Security: The Unofficial Guide blog | 2026-05-04 14:00 | wiz.io | original ↗ | #supply-chain | #devsecops | #npm
3. Catching malicious package releases using a transparency log blog | 2025-12-12 12:00 | blog.trailofbits.com | original ↗ | #supply-chain | #threat-detection | #sigstore
4. You're Invited: Delivering malware via Google Calendar invites and PUAs blog | 2025-05-13 00:00 | aikido.dev | original ↗ | #supply-chain | #malware | #npm
5. Why Lockfiles Matter for Supply Chain Security blog | 2025-04-01 00:00 | aikido.dev | original ↗ | #supply-chain | #dependency-management | #npm
Skip to content