| NIST SP 800-161r1 - Cybersecurity Supply Chain Risk Management Practices for Systems and Organizations | Frameworks and Standards | Risk Frameworks |
| Malice in Agentland: Down the Rabbit Hole of Backdoors in the AI Supply Chain | Model Attacks | Backdoors and Trojans |
| Zero-dependency MCP server implementation. | Supply Chain | Resources |
| model-signing | Supply Chain | Resources |
| Supply chain security for ML | Supply Chain | Resources |
| Design WIP Market Report AI Security - Final.pdf | Supply Chain | Resources |
| Axios Developer Tool Compromise | Supply Chain | Resources |
| 11 minutes was all it took to hack GitHub - poisoned nx console VS Code extension by teampcp | Supply Chain | Resources |
| 20 Days Later: Trivy Compromise, Act II | Supply Chain | Resources |
| 3CX Software Supply Chain Compromise Investigation - Mandiant | Supply Chain | Resources |
| 8 Million Requests Later, We Made The SolarWinds Supply Chain Attack Look Amateur | Supply Chain | Resources |
| @ctrl/tinycolor Supply Chain Attack Post-mortem | Supply Chain | Resources |
| A backdoor in xz - LWN | Supply Chain | Resources |
| A Comprehensive Study on the Impact of Vulnerable Dependencies on Open-Source Software | Supply Chain | Resources |
| A New Kali Linux Archive Signing Key | Supply Chain | Resources |
| A Reality Check on SBOM-based Vulnerability Management: An Empirical Study and A Path Forward | Supply Chain | Resources |
| Abusing Go's infrastructure | Supply Chain | Resources |
| ActionsCacheBlasting - GitHub Actions cache poisoning proof-of-concept | Supply Chain | Resources |
| Adnan Khan finds another GitHub Action compromised like tj-actions/changed-files | Supply Chain | Resources |
| Adnan Khan on TeamPCP backdooring the Checkmarx Jenkins AST plugin with Dune-themed malware | Supply Chain | Resources |
| Agent of Chaos: Hijacking NodeJS's Jenkins Agents | Supply Chain | Resources |
| ai-bom - AI Bill of Materials scanner to discover every AI agent, model and API in your infrastructure | Supply Chain | Resources |
| Aikido Intel - Real-time vulnerability and malware intelligence for open source packages | Supply Chain | Resources |
| Akrites - Coordinated, confidential vulnerability remediation for open source software | Supply Chain | Resources |
| Announcing Chalk Alpha - open-source software provenance | Supply Chain | Resources |
| Announcing the deps.dev API: critical dependency data for secure supply chains | Supply Chain | Resources |
| Anton on building an LLM-powered supply chain audit system with Claude - ClaudeForBlueTeam Day 16 | Supply Chain | Resources |
| Anza on the @solana/web3.js npm compromise pushing malicious versions 1.95.6 and 1.95.7 | Supply Chain | Resources |
| Apiiro: Malicious Code Campaign Using a GitHub Repo Confusion Attack | Supply Chain | Resources |
| Arch Linux disables AUR package adoption amid malicious activity | Supply Chain | Resources |
| Arch Linux's reproducible source tarballs caught the xz backdoor | Supply Chain | Resources |
| Attackers Are Impersonating a Linux Foundation Leader in Slack to Target Open Source Developers | Supply Chain | Resources |
| awesome-cicd-attacks - Practical resources for offensive CI/CD security research | Supply Chain | Resources |
| Ax Sharma on GitHub flaw letting malware appear hosted on Microsoft's official repos | Supply Chain | Resources |
| Axios npm Supply Chain Compromise - Full RE, Dynamic Analysis and BlueNoroff Attribution | Supply Chain | Resources |
| Axios npm supply chain compromise analysis - Joe Desimone gist | Supply Chain | Resources |
| Azure DevOps Zero-Click CI/CD Vulnerability - Legit Security | Supply Chain | Resources |
| Backdoor in upstream xz/liblzma leading to SSH server compromise | Supply Chain | Resources |
| Backstabber's Knife Collection - A Review of Open Source Software Supply Chain Attacks | Supply Chain | Resources |
| bagel - CLI that inventories security-relevant metadata on developer workstations | Supply Chain | Resources |
| Binarly launches xz.fail API for bulk scanning the xz backdoor | Supply Chain | Resources |
| Binarly XZ backdoor detector | Supply Chain | Resources |
| bogrod - manage SBOM and VEX like source code | Supply Chain | Resources |
| Booz Allen Analysis Reveals Risks in Using Chinese AI Models for America's Software Supply Chain | Supply Chain | Resources |
| Brian Krebs on attribution in the XZ backdoor | Supply Chain | Resources |
| Building a Supply Chain Attack with .NET and NuGet | Supply Chain | Resources |
| bumblebee - developer endpoint scanner for supply-chain compromise exposure | Supply Chain | Resources |
| Bybit hack update: Lazarus compromised Safe Wallet's AWS S3 bucket to inject malicious JavaScript | Supply Chain | Resources |
| Bypassing egress filtering in BullFrog GitHub Action | Supply Chain | Resources |
| Catching the LiteLLM PyPI Attack: The Full Claude Code Transcript | Supply Chain | Resources |
| cdxgen v9.6.0 release - CycloneDX SBOM generator | Supply Chain | Resources |
| CERT-EU: European Commission cloud breach - a supply-chain compromise via Trivy | Supply Chain | Resources |
| Chainloop - software supply chain evidence store and policy engine for attestations, SBOMs and VEX | Supply Chain | Resources |
| Chalk - software provenance and attestation from build to production | Supply Chain | Resources |
| Chinese Implants in the Supply Chain - VulnCheck traces the ZBT router supply chain | Supply Chain | Resources |
| Christopher Stanley on the Cyberhaven breach - malicious Chrome extension and IOCs | Supply Chain | Resources |
| CICD-Goat Setup and Easy Challenge Walkthrough - WhiteRabbit, MadHatter, Duchess | Supply Chain | Resources |
| Clément Dumas on npm squatting of Anthropic-internal package names after Claude Code source leak | Supply Chain | Resources |
| Code Signing is not Enough | Supply Chain | Resources |
| CodeQLEAKED - Public Secrets Exposure Leads to Supply Chain Attack on GitHub CodeQL | Supply Chain | Resources |
| Compromised Chrome extensions tracking spreadsheet - December 2024 extension supply-chain attack | Supply Chain | Resources |
| Continuous hardening of Chainguard's internal software supply chain | Supply Chain | Resources |
| Could lockfiles just be SBOMs | Supply Chain | Resources |
| CramHacks #24 - software supply chain security newsletter | Supply Chain | Resources |
| CramHacks - Public Affected Functions | Supply Chain | Resources |
| CVE-2023-1767 - Stored XSS on Snyk Advisor allows fabrication of npm package health scores | Supply Chain | Resources |
| CVE-2023-49291 and More - A Potential Actions Nightmare | Supply Chain | Resources |
| Cyberhaven Extension Compromise - Live Incident Tracker | Supply Chain | Resources |
| Cyberhaven's Preliminary Analysis of the Malicious Chrome Extension Attack | Supply Chain | Resources |
| Dangerous by default: Insecure GitHub Actions found in MITRE, Splunk, and other open source repositories | Supply Chain | Resources |
| DataDog malicious-software-packages-dataset - vetted malicious npm, PyPI and AI Skills packages | Supply Chain | Resources |
| dax on npm revoking every npm token and moving to OIDC | Supply Chain | Resources |
| Deceptive Deprecation: The Truth About npm Deprecated Packages | Supply Chain | Resources |
| Deep Dive into the CISA and NSA Best Practices for CI/CD Environments - Anchore Webinar | Supply Chain | Resources |
| DEF CON 31 - The GitHub Actions Worm - Asi Greenholts | Supply Chain | Resources |
| Dependabot user-defined rules for security updates and alerts | Supply Chain | Resources |
| Dependabot version updates introduce default package cooldown | Supply Chain | Resources |
| Dependency Confusions in Docker and remote pwning of your infra | Supply Chain | Resources |
| Dependency Cooldowns - configuring package manager cooldowns to defend against supply chain attacks | Supply Chain | Resources |
| Dependency cooldowns are unfair; we should use phased rollouts instead | Supply Chain | Resources |
| Deprecation Notice - Dependabot to Drop Support for Python 3.6 and 3.7 | Supply Chain | Resources |
| deps.dev - Open Source Insights dependency and vulnerability explorer | Supply Chain | Resources |
| depsguard - harden package manager configs against supply chain attacks | Supply Chain | Resources |
| Deptective - Trail of Bits tool that determines native dependencies for any program | Supply Chain | Resources |
| Detect and control software package downloads with package registry security | Supply Chain | Resources |
| Diving into PyPI package name squatting | Supply Chain | Resources |
| Do you know if all your repositories have up-to-date dependencies - GitHub Evergreen and Dependabot | Supply Chain | Resources |
| Docker Hardened Images for every developer | Supply Chain | Resources |
| DPRK Contagious Interview Malware Weaponizes VS Code Tasks - OpenSourceMalware | Supply Chain | Resources |
| DuckDB NPM packages 1.3.3 and 1.29.2 compromised with malware - GitHub advisory | Supply Chain | Resources |
| echarts-for-react npm supply chain compromise | Supply Chain | Resources |
| Elastic releases detections for the Axios supply chain compromise | Supply Chain | Resources |
| Elf-Stats NPM Christmas Spam Campaign | Supply Chain | Resources |
| Everything I Know About the XZ Backdoor | Supply Chain | Resources |
| Exposing Infection Techniques Across Supply Chains and Codebases | Supply Chain | Resources |
| Fake GitHub projects distribute stealers in GitVenom campaign | Supply Chain | Resources |
| Feross: TeamPCP's own advice for defenders - pin hashes, least-privilege tokens, and use Socket | Supply Chain | Resources |
| fickling - Python pickle decompiler and static analyzer for malicious ML model files | Supply Chain | Resources |
| Filippo Valsorda on the xz backdoor - RCE via hooked RSA_public_decrypt, gated by Ed448 signature | Supply Chain | Resources |
| Filippo Valsorda: xz backdoor is gated RCE via Ed448-signed payload, not an auth bypass | Supply Chain | Resources |
| Finding and utilising leaked code signing certificates | Supply Chain | Resources |
| Finding Software Supply Chain Attack Paths with Logical Attack Graphs | Supply Chain | Resources |
| Forging signed commits on GitHub | Supply Chain | Resources |
| Gato - GitHub Actions pipeline enumeration and attack toolkit, superseded by Trajan | Supply Chain | Resources |
| Gato-X - GitHub Actions static analysis and exploit toolkit | Supply Chain | Resources |
| Generation of VEX documents by the Kubescape relevancy engine - kubevuln issue #155 | Supply Chain | Resources |
| gh-sbom - generate SBOMs with the gh CLI | Supply Chain | Resources |
| GitHub Actions Security - Legit Security whitepaper | Supply Chain | Resources |
| GitHub Actions Supply Chain Attack - Coinbase and the tj-actions/changed-files Incident | Supply Chain | Resources |
| GitHub Advisory Database - reviewed npm advisories | Supply Chain | Resources |
| GitHub on internal repo access via a poisoned VS Code extension on an employee device | Supply Chain | Resources |
| GitHub Repos Used for Distributing Malware | Supply Chain | Resources |
| GitHub roadmap: Immutable Actions Publishing for GitHub Actions | Supply Chain | Resources |
| GitHub search for 'Shai-Hulud Repository' repos created by the npm worm | Supply Chain | Resources |
| GitHub security alert: social engineering campaign targets technology industry employees | Supply Chain | Resources |
| google/oss-rebuild - securing open-source package ecosystems with build attestations | Supply Chain | Resources |
| Grafana security update: no customer impact from GitHub workflow vulnerability | Supply Chain | Resources |
| guac - aggregates software supply chain security metadata into a graph | Supply Chain | Resources |
| Hackers are spoofing themselves as GitHub's Dependabot to steal user passwords | Supply Chain | Resources |
| Hat Trick: AWS introduced same RCE vulnerability three times in four years | Supply Chain | Resources |
| heisenberg-ssc-gha - dependency health check GitHub Action for supply chain security | Supply Chain | Resources |
| Helm advisory: Chart dependency updating with malicious Chart.yaml content and symlink | Supply Chain | Resources |
| Homebrew pins xz to 5.4.6 after the xz backdoor - Discussion #5243 | Supply Chain | Resources |
| How Dependabot Actually Works | Supply Chain | Resources |
| How I Got Hacked: A Warning about Malicious PoCs | Supply Chain | Resources |
| How My Homemade NPM Hunter Caught a Mini Shai-Hulud Package | Supply Chain | Resources |
| How Quickly Do Development Teams Update Their Vulnerable Dependencies? | Supply Chain | Resources |
| How the TanStack npm attack happened via GitHub Actions cache poisoning | Supply Chain | Resources |
| How to Curate VS Code Remote Repositories - JFrog Curation for AI editor extensions | Supply Chain | Resources |
| How to gain code execution on millions of people and hundreds of popular apps - ToDesktop | Supply Chain | Resources |
| How we got hit by Shai-Hulud: A complete post-mortem - Trigger.dev | Supply Chain | Resources |
| How We Hacked a Software Supply Chain for $50K | Supply Chain | Resources |
| How we pwned X, Vercel, Cursor, Discord, and hundreds of companies through a supply-chain attack | Supply Chain | Resources |
| Identifying the Supply Chain of AI for Trustworthiness and Risk Management in Critical Applications | Supply Chain | Resources |
| Immutable Tag - guaranteeing immutability of version control tags with blockchain | Supply Chain | Resources |
| Improving Supply Chain Security for Rust Through Artifact Signing | Supply Chain | Resources |
| Incident Timeline - TeamPCP Supply Chain Campaign and the Trivy compromise | Supply Chain | Resources |
| Inside the failed attempt to backdoor SSH globally that got caught by chance - XZ supply chain | Supply Chain | Resources |
| International Cyber Digest: S&P Global hit by TeamPCP Trivy and LiteLLM supply chain attacks | Supply Chain | Resources |
| Introducing Frizbee - securing GitHub Actions | Supply Chain | Resources |
| Introducing MavenGate: a supply chain attack method for Java and Android applications | Supply Chain | Resources |
| Introducing npm package provenance | Supply Chain | Resources |
| Introducing Package Proxy: supply-chain safety checks without client-side software | Supply Chain | Resources |
| Introducing safe npm - a Socket npm wrapper | Supply Chain | Resources |
| Introducing Socket Firewall: Free, Proactive Protection for Your Software Supply Chain | Supply Chain | Resources |
| Introducing Supply-Chain Firewall: Protecting Developers from Malicious Open Source Packages - Datadog | Supply Chain | Resources |
| Investigating Two Variants of the Trivy Supply-Chain Compromise | Supply Chain | Resources |
| Jeff Cross on the malicious Nx Console 18.95.0 possibly hitting 6k installs | Supply Chain | Resources |
| jest-canvas-mock npm supply chain compromise - GitHub issue | Supply Chain | Resources |
| Joe Desimone on an AI harness monitoring PyPI and npm diffs that caught the Axios compromise | Supply Chain | Resources |
| John Hultquist: axios supply chain compromise attributed to DPRK actor UNC1069 | Supply Chain | Resources |
| Journey to the Center of Software Supply Chain Attacks | Supply Chain | Resources |
| JSSCM - JavaScript Supply Chain Monitor detecting expired domains for stored XSS | Supply Chain | Resources |
| KEIP - eBPF/LSM tool that blocks malicious network activity during pip install | Supply Chain | Resources |
| Keyv and friends compromised in npm supply chain attack | Supply Chain | Resources |
| KitOps - packaging, versioning and sharing AI projects as OCI ModelKits | Supply Chain | Resources |
| LavaMoat - tools for sandboxing your JavaScript dependency graph against supply chain attacks | Supply Chain | Resources |
| Lessons Learned from 2024's Supply Chain Attacks | Supply Chain | Resources |
| Leveraging VSCode Extensions for Initial Access | Supply Chain | Resources |
| liblzma and xz version 5.6.0 and 5.6.1 are vulnerable to arbitrary code execution compromise | Supply Chain | Resources |
| List of issues discovered with open source SBOM generators - sbomqs discussion | Supply Chain | Resources |
| LiteLLM - pin Trivy version in security scans CI | Supply Chain | Resources |
| LiteLLM 1.82.7 and 1.82.8 PyPI packages compromised | Supply Chain | Resources |
| LiteLLM Breach Checker: Is Your Organization Exposed? | Supply Chain | Resources |
| LOTP - Living Off the Pipeline | Supply Chain | Resources |
| Malicious code in Lottie-Player CDN files - LottieFiles issue #254 | Supply Chain | Resources |
| Malicious litellm_init.pth credential stealer in litellm 1.82.8 PyPI package - GitHub issue | Supply Chain | Resources |
| Malware in @solana/web3.js npm package | Supply Chain | Resources |
| Malware in Open VSX: These Vibes Are Off - extension risks for AI code editors | Supply Chain | Resources |
| Marketplace Takeover: How We Could've Taken Over Every Developer Using a VSCode Fork | Supply Chain | Resources |
| Megalodon: Mass GitHub Repo Backdooring via CI Workflows - SafeDep | Supply Chain | Resources |
| Microsoft's durabletask PyPI Package Compromised in Supply Chain Attack | Supply Chain | Resources |
| Mini Shai-Hulud Strikes Again - 317 npm Packages Compromised | Supply Chain | Resources |
| Mitchell Hashimoto on forking and pinning dependencies to reduce supply chain attack risk | Supply Chain | Resources |
| Mitigated API authentication bypass for python.org download metadata | Supply Chain | Resources |
| New details reveal how hackers hijacked 35 Google Chrome extensions | Supply Chain | Resources |
| New GitHub Action supply chain attack - reviewdog/action-setup | Supply Chain | Resources |
| New year, new image: Introducing the Chainguard Images Directory | Supply Chain | Resources |
| NIST SP 800-204D - Strategies for the Integration of Software Supply Chain Security in DevSecOps CI/CD Pipelines | Supply Chain | Resources |
| No one owes you supply-chain security | Supply Chain | Resources |
| npm 'accidentally' removes Stylus package, breaks builds and pipelines | Supply Chain | Resources |
| npm Malware Cluster Uses Hidden README Payloads to Trigger Credential Theft | Supply Chain | Resources |
| Npm Package Targeting GitHub-Owned Repositories Flagged as Red Team Exercise | Supply Chain | Resources |
| npm publish-time malware scanning and dual-use metadata | Supply Chain | Resources |
| NPM-Threat-Emulation - atomic tests for validating npm supply-chain attack detections | Supply Chain | Resources |
| NSA and CISA - Defending Continuous Integration/Continuous Delivery CI/CD Environments | Supply Chain | Resources |
| Nx Console VS Code Extension Compromised - malicious version steals developer credentials and CI/CD secrets | Supply Chain | Resources |
| One Supply Chain Attack to Rule Them All - Poisoning GitHub's Runner Images | Supply Chain | Resources |
| Open VSX publish-extensions fix commit - use separate jobs instead of child_process | Supply Chain | Resources |
| OpenAI on the Axios library security incident and macOS app certificate updates | Supply Chain | Resources |
| opengrep PyPI package temporarily taken over - security advisory | Supply Chain | Resources |
| OpenSourceMalware API - one API to query open source malware threat intel | Supply Chain | Resources |
| OpenSourceMalware.com threat intel entry for aquasecurity/trivy | Supply Chain | Resources |
| oss-security - backdoor in upstream xz/liblzma leading to ssh server compromise | Supply Chain | Resources |
| OSSGadget - tools for analyzing open source packages | Supply Chain | Resources |
| OSV - Open Source Vulnerabilities database | Supply Chain | Resources |
| Package Manager Design Tradeoffs | Supply Chain | Resources |
| PackageGate: 6 zero-days in JS package managers, but npm won't act | Supply Chain | Resources |
| Packj - flags malicious and risky open-source packages | Supply Chain | Resources |
| Paul Vann on Ghost by Validia - agent-based package change monitoring against supply chain attacks | Supply Chain | Resources |
| PBOM.dev - Open Software Supply Chain Security Framework and OSC&R | Supply Chain | Resources |
| Phantom in the Vault: Obsidian Abused to Deliver PhantomPulse RAT | Supply Chain | Resources |
| PKfail: Untrusted Platform Keys Undermine Secure Boot - Binarly research report | Supply Chain | Resources |
| Playing with Fire - How We Executed a Critical Supply Chain Attack on PyTorch | Supply Chain | Resources |
| Please Stop Sending Me Nested Dependency Security Reports | Supply Chain | Resources |
| pnpm 10.0.0 Blocks Lifecycle Scripts by Default | Supply Chain | Resources |
| Poisoned Pipeline Execution Attacks: A Look at CI-CD Environments | Supply Chain | Resources |
| Poisoning Pipelines: Azure DevOps Edition | Supply Chain | Resources |
| Polyfill supply chain attack hits 100K+ sites | Supply Chain | Resources |
| Post Mortem: axios npm supply chain compromise | Supply Chain | Resources |
| Post-mortem of Shai-Hulud attack on November 24th, 2025 | Supply Chain | Resources |
| poutine - supply chain vulnerability scanner for build pipelines | Supply Chain | Resources |
| Principles for Package Repository Security | Supply Chain | Resources |
| Principles for Package Repository Security v0.2 | Supply Chain | Resources |
| Protect your open source project from supply chain attacks | Supply Chain | Resources |
| Public Security Advisory regarding Malicious versions of Nx - GitHub issue | Supply Chain | Resources |
| PyPI incident report: token exfiltration campaign via GitHub Actions workflows | Supply Chain | Resources |
| PyPI Introducing Trusted Publishers - OIDC-based secure package publishing | Supply Chain | Resources |
| Rami McCarthy on Mini Shai-Hulud fallout - 49 Microsoft/Azure GitHub repos removed | Supply Chain | Resources |
| Rami McCarthy shares a visualization of the keyv worm's spread | Supply Chain | Resources |
| RCE Vulnerability in Azure Pipelines Can Lead to Software Supply Chain Attack - CVE-2023-21553 | Supply Chain | Resources |
| react-native-international-phone-number release 0.12.1 is compromised | Supply Chain | Resources |
| Reduce dependencies of libsystemd - systemd issue after the xz backdoor CVE-2024-3094 | Supply Chain | Resources |
| Risk Explorer for Software Supply Chains | Supply Chain | Resources |
| ruby nealon on the CVE-2024-3094 xz supply-chain attack and auditing OSS contributors | Supply Chain | Resources |
| running-qix-malware - how the compromised Qix npm packages could have been stopped | Supply Chain | Resources |
| S1ngularity/nx attackers strike again - first-of-its-kind npm worm payload | Supply Chain | Resources |
| s1ngularity: Nx npm supply chain attack leaks secrets on GitHub - everything you need to know | Supply Chain | Resources |
| S3C2 Summit 2025-03: Industry Secure Supply Chain Summit | Supply Chain | Resources |
| SafeDep MCP Server - real-time malicious package threat intelligence for AI coding agents | Supply Chain | Resources |
| SANDWORM_MODE: Shai-Hulud-Style npm Worm Hijacks CI Workflows and Poisons AI Toolchains | Supply Chain | Resources |
| SAP Risk Explorer for Software Supply Chains - taxonomy of open source supply chain attacks | Supply Chain | Resources |
| sbomqs - SBOM quality and compliance scoring tool | Supply Chain | Resources |
| scarno - dependency pruner flagging unused, undeclared and suspicious dependencies | Supply Chain | Resources |
| secure-supply-chain-on-aks - securing container deployments with open-source tools | Supply Chain | Resources |
| Securing Machine Learning Models - A Comprehensive Guide to Model Scanning | Supply Chain | Resources |
| Self-spreading GlassWorm malware hits OpenVSX, VS Code registries | Supply Chain | Resources |
| Shai-Hulud 2.0 npm worm - Datadog Security Labs writeup | Supply Chain | Resources |
| Shai-Hulud 2.0 Supply Chain Attack: npm worm exposes 25K+ repos | Supply Chain | Resources |
| Shai-Hulud Returns: Over 1K NPM Packages and 27K+ GitHub Repos Infected via Fake Bun Runtime | Supply Chain | Resources |
| Sigstore - sign, verify and protect software supply chain artifacts | Supply Chain | Resources |
| sketchy - scan repos for malicious patterns before you git clone or install | Supply Chain | Resources |
| slsa-github-generator - language-agnostic SLSA provenance generation for GitHub Actions | Supply Chain | Resources |
| Socket Acquires Coana to Bring Reachability Analysis to Every Appsec Team | Supply Chain | Resources |
| Socket acquires Secure Annex to expand extension security across browsers, IDEs and AI tools | Supply Chain | Resources |
| Software Heritage archive of the xz-utils backdoor revision | Supply Chain | Resources |
| Software Supply Chain Security of Web3 | Supply Chain | Resources |
| Software with politic opinion is a security threat | Supply Chain | Resources |
| SolanaFloor: attacker behind the September 2025 npm supply-chain attack stole only $66 | Supply Chain | Resources |
| Spooky Skills - Agent Skill Supply Chain Risks | Supply Chain | Resources |
| Stacklok has contributed Minder to the OpenSSF | Supply Chain | Resources |
| Staged publishing for npm packages - npm Docs | Supply Chain | Resources |
| StepSecurity Secure Workflow - harden GitHub Actions workflows | Supply Chain | Resources |
| Supply chain nightmare: How Rust will be attacked and what we can do to mitigate the inevitable | Supply Chain | Resources |
| Supply Chain Reaction: Enhancing the Precision of Vulnerability Triage using Code Reachability Information | Supply Chain | Resources |
| Supply chain security for Go, Part 3: Shifting left | Supply Chain | Resources |
| Supply chain security for the 0.001% and why it won't catch on | Supply Chain | Resources |
| Supply Chain Security is FUBAR - A Proposal for GitHub | Supply Chain | Resources |
| Supply-Chain Attacks Cluster: 230,000 Advisories, Five Patterns | Supply Chain | Resources |
| supply-chain-monitor - LLM-based monitoring of top PyPI and npm packages for compromise | Supply Chain | Resources |
| Tal Be'ery on the Safe wallet supply-chain hack behind the Bybit breach | Supply Chain | Resources |
| TanStack npm supply-chain compromise advisory - 42 packages exfiltrating cloud credentials and SSH keys | Supply Chain | Resources |
| Taxonomy of Attacks on Open-Source Software Supply Chains | Supply Chain | Resources |
| TeamPCP - supply chain campaign breach tracker | Supply Chain | Resources |
| TeamPCP Defaces Aqua Security's Internal GitHub Org - 44 repos exposed | Supply Chain | Resources |
| TeamPCP Hijacks LiteLLM PyPI Package with Credential Stealer | Supply Chain | Resources |
| TeamPCP Supply Chain Campaign - Incident Timeline and IOCs | Supply Chain | Resources |
| Techies vs spies: the xz backdoor debate | Supply Chain | Resources |
| The Case Against Automatic Dependency Updates | Supply Chain | Resources |
| The Holiday Whisper: Shai-Hulud 3.0 npm worm variant | Supply Chain | Resources |
| The massive bug at the heart of the npm ecosystem | Supply Chain | Resources |
| The Monsters in Your Build Cache - GitHub Actions Cache Poisoning | Supply Chain | Resources |
| The Russian Open Source Project That We Can't Live Without | Supply Chain | Resources |
| The Snake is in the Grass - Finding Malicious PyPI Packages in the Wild - slides | Supply Chain | Resources |
| The sorry state of skill distribution | Supply Chain | Resources |
| The supply chain attack nobody is talking about: skill.md is an unsigned binary | Supply Chain | Resources |
| Third-Party GitHub Actions: Effects of an Opt-Out Permission Model | Supply Chain | Resources |
| Thomas Roccia's attack-flow diagram of the 3CX supply chain attack | Supply Chain | Resources |
| Thomas Roccia's one-page visual analysis of the XZ backdoor attack | Supply Chain | Resources |
| Toptal's GitHub Organization Hijacked - 10 Malicious Packages Published | Supply Chain | Resources |
| Trivy security incident 2026-03-01 - GitHub Actions supply chain compromise | Supply Chain | Resources |
| Trivy security incident 2026-03-19 - malicious Trivy, trivy-action and setup-trivy releases stole CI credentials | Supply Chain | Resources |
| Trivy v0.69.4 binary supply-chain compromise: discussion with IoCs after incident thread was deleted | Supply Chain | Resources |
| Trusted publishing for npm packages | Supply Chain | Resources |
| Turn Dependabot Off | Supply Chain | Resources |
| Turning Dependency Confusion Research into a Profitable Stack | Supply Chain | Resources |
| undelete - recover packages deleted from NPM and PyPI | Supply Chain | Resources |
| Understanding and Re-Creating the tj-actions/changed-files Supply Chain Attack | Supply Chain | Resources |
| Upcoming breaking changes for npm v12 | Supply Chain | Resources |
| Using the determineversion API to find C/C++ vulnerabilities | Supply Chain | Resources |
| uv Wants to Secure Your CLI Tools | Supply Chain | Resources |
| vault-backdoored - antitree's backdoored fork of HashiCorp Vault | Supply Chain | Resources |
| Visual Studio Private Marketplace README - self-hosted extension marketplace for VS Code | Supply Chain | Resources |
| VPChecker - vulnerability triage using code reachability, Supply Chain Reaction paper artifacts | Supply Chain | Resources |
| VS Code issue: minimumReleaseAge setting to mitigate supply chain attacks on extensions | Supply Chain | Resources |
| VSMEx - VS Code Malicious Extensions Dataset | Supply Chain | Resources |
| VSXSentry Guard - auto-block and remove malicious VS Code extensions | Supply Chain | Resources |
| Vulnerability and malware checks in uv | Supply Chain | Resources |
| vx-underground on a malicious Cursor AI VS Code extension campaign targeting crypto holders | Supply Chain | Resources |
| Walshy on building a package registry gateway with version cooldowns after the TanStack compromise | Supply Chain | Resources |
| Watching xz unfold from afar | Supply Chain | Resources |
| Weaponizing Dependabot: Pwn Request at its Finest | Supply Chain | Resources |
| What Gets Measured Gets Managed: Mitigating Supply Chain Attacks with a Link Integrity Management System | Supply Chain | Resources |
| What the fork? Imposter commits in GitHub Actions and CI/CD | Supply Chain | Resources |
| What's coming to our GitHub Actions 2026 security roadmap | Supply Chain | Resources |
| What's new in SLSA v1.0 | Supply Chain | Resources |
| Wiz: GitHub Actions Security Part 1 - Threat Model, Attacks and Defenses | Supply Chain | Resources |
| Wolves in the Repository: A Software Engineering Analysis of the XZ Utils Supply Chain Attack | Supply Chain | Resources |
| Worse than SolarWinds: Three Steps to Hack Blockchains, GitHub, and ML through GitHub Actions | Supply Chain | Resources |
| WTFpkg - catalog of package manager attack techniques across apt, pip, npm, RubyGems and Cargo | Supply Chain | Resources |
| XZ Backdoor: Times, damned times, and scams | Supply Chain | Resources |
| Xz format inadequate for long-term archiving | Supply Chain | Resources |
| xz Utils backdoor: malicious code in widely used Linux utility targets encrypted SSH connections | Supply Chain | Resources |
| xz-utils backdoor situation - CVE-2024-3094 | Supply Chain | Resources |
| xz/liblzma: Bash-stage Obfuscation Explained | Supply Chain | Resources |
| xzbot - xz backdoor exploit demo and honeypot | Supply Chain | Resources |
| zizmor would have caught the Ultralytics workflow vulnerability | Supply Chain | Resources |
| RapidFort - container software supply chain security platform | Detection and Monitoring | Security Platforms |
| The Mother of All AI Supply Chains: Critical, Systemic Vulnerability at the Core of Anthropic's MCP | MCP (Model Context Protocol) | Known Vulnerabilities and Exploits |
| Cycode - GitHub Advanced Security alternative for software supply chain security | Code Analysis | Platforms |
| Your Agent Is Mine: Measuring Malicious Intermediary Attacks on the LLM Supply Chain | Papers | Agent Security |
| Cyberattack Detection in Critical Infrastructure and Supply Chains | Papers | Defense and Detection |
| Establishing a Baseline of Software Supply Chain Security Task Adoption by Software Organizations | Papers | General AI Security |
| Investigating Security Implications of Automatically Generated Code on the Software Supply Chain | Papers | General AI Security |
| Security Vulnerabilities in Software Supply Chain for Autonomous Vehicles | Papers | General AI Security |
| I'm The Captain Now: Hijacking a global ocean supply chain network | General Reading | Security News and Research |