FeedBagel

All Topics

Art

NPM security: preventing supply chain attacks

3y agoen

programming

Source

SnykNPM security: preventing supply chain attackssnyk.io

Snippet from the RSS feed

In this post, I intend to unveil npm security practices and tooling available for you as a JavaScript developer (TypeScript developers are welcome too).

You might also wanna read

NPM Security Best Practices Guide for Preventing Supply Chain Attacks

This GitHub repository provides comprehensive security best practices for NPM (Node Package Manager) to protect against supply chain attacks

github.com·9mo ago

AWS well-architected best practices for software supply chain security

This article discusses software supply chain security best practices in the context of recent npm Registry attacks (Shai-Hulud, Chalk/Debug,

aws.amazon.com·1mo ago

AWS well-architected framework best practices for software supply chain security

This article discusses software supply chain security best practices in the context of recent npm Registry attacks (Shai-Hulud, Chalk/Debug,

aws.amazon.com·1mo ago

npm to Implement Staged Publishing as Security Response to Supply Chain Attacks

npm is implementing staged publishing as a security response to supply chain attacks, particularly the Shai-Hulud campaign that exposed vuln

socket.dev·6mo ago

September 2025 NPM supply-chain attack compromises popular JavaScript packages

In September 2025, a coordinated software supply-chain attack targeted multiple popular NPM packages in the JavaScript ecosystem. The attack

projectptixiakis.github.io·1mo ago

NPM supply chain attack compromises popular packages, posing widespread security risk

A significant supply chain attack on the NPM package ecosystem compromised several popular packages, potentially allowing malicious code to

xeiaso.net·10mo ago

Comments

No comments yet. Be the first.