1.Prepare for the Cyber Resilience Act's 24-hour reporting deadlineblog | 2026-09-10 00:00 | about.gitlab.com | Original ↗ | .md | #gitlab | #compliance | #eu
2.And another one. GitHub ships break-glass credential revocationblog | 2026-07-01 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #incident-response | #credential-security
3.Aikido acquires Root to secure the supply chainblog | 2026-06-30 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #vulnerability-management | #open-source
4.npm now freezes high-impact accounts after risky account changesblog | 2026-06-26 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #open-source | #developer-security
5.Packagist is now protected by Aikido Intel and other updates to the PHP registryblog | 2026-06-26 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #threat-intelligence | #malware
6.Everybody's shipping code they can't readblog | 2026-06-25 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #supply-chain | #open-source
7.Compromised GitHub action codfish/semantic-release-action steals CI/CD secretsblog | 2026-06-24 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #devsecops | #secrets
8.Software Supply Chain Security: Protecting the Path From Commit to Productionblog | 2026-06-23 07:00 | bugbunny.ai | Original ↗ | .md | #supply-chain | #devsecops | #ci-cd
9.Aikido x Drydock | A way for maintainers to catch malware before it shipsblog | 2026-06-23 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #devsecops | #open-source
10.JFrog Named a Leader in the Inaugural Gartner® Magic Quadrant™ for Software Supply Chain Securityblog | 2026-06-18 16:27 | jfrog.com | Original ↗ | .md | #ai-security | #supply-chain | #jfrog
11.Multiple JetBrains IDE plugins caught stealing AI keysblog | 2026-06-16 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #supply-chain | #malware
12.npm v12 delivers one of the biggest security improvements in yearsblog | 2026-06-11 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #devsecops | #open-source
13.SBOMs in 2026: Everyone's generating them, no one's using themblog | 2026-06-10 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #compliance | #enisa
14.Code is being written everywhere, and the device is the only constantblog | 2026-06-10 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #devsecops | #attack-surface
15.Wait, binding.gyp Can Do What? Exploring npm's Weirdest Build Systemblog | 2026-06-09 00:00 | aikido.dev | Original ↗ | .md | #cloud | #supply-chain | #malware
16.Why EDR and proxy won’t save you from supply chain malwareblog | 2026-06-02 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #malware | #npm
17.CertiK Skill Scanner: The Antivirus for the AI Agetool | 2026-05-27 12:40 | certik.com | Original ↗ | .md | #ai-security | #web3 | #static-analysis
18.Supply Chain Attack Targets Laravel-Lang Packages with Credential Stealerincident | 2026-05-23 00:00 | aikido.dev | Original ↗ | .md | #cloud | #supply-chain | #credential-theft
19.Legitimate-Looking Codex Remote UI Secretly Steals Your AI Tokensblog | 2026-05-27 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #supply-chain | #malware
20.Mini Shai-Hulud Is Back: npm Worm Hits over 160 Packages, including Mistral and Tanstackblog | 2026-05-12 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #supply-chain | #malware
21.It's time to treat browser extensions like supply chain attack vectorsincident | 2026-04-25 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #supply-chain | #third-party-risk
22.Mini Shai-Hulud Targets SAP npm Packages With a Bun-Based Secret Stealerblog | 2026-04-29 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #secrets | #malware
23.curl removed from Omnibus-GitLab FIPS packages in 19.0blog | 2026-04-24 00:00 | about.gitlab.com | Original ↗ | .md | #supply-chain | #gitlab | #compliance
24.Is Shai-Hulud Back? Compromised Bitwarden CLI Contains a Self-Propagating npm Wormblog | 2026-04-23 00:00 | aikido.dev | Original ↗ | .md | #cloud | #supply-chain | #credential-theft
25.Skill Scanning Is Not a Security Boundaryresearch | 2026-03-16 13:00 | certik.com | Original ↗ | .md | #ai-security | #web3 | #open-source
26.fast-draft Open VSX Extension Compromised by BlokTrooperblog | 2026-03-18 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #malware | #infostealer
27.Glassworm Strikes Popular React Native Phone Number Packagesblog | 2026-03-16 00:00 | aikido.dev | Original ↗ | .md | #supply-chain | #malware | #npm
28.How to use GitLab Container Virtual Registry with Docker Hardened Imagesblog | 2026-03-12 00:00 | about.gitlab.com | Original ↗ | .md | #supply-chain | #cloud-security | #gitlab
29.NIS2 Compliance in 2026: Compliance Doesn’t Have to Mean Complexityblog | 2026-03-02 10:53 | jfrog.com | Original ↗ | .md | #ai-security | #rce | #supply-chain
30.What is Slopsquatting? The AI Package Hallucination Attack Already Happeningblog | 2026-02-20 00:00 | aikido.dev | Original ↗ | .md | #ai-security | #npm | #llm