Ship Code. Not Malware. SafeDep Launches GitHub App for Malicious Package Protection
SafeDep launches a GitHub App for zero-configuration protection against malicious open source packages. Instantly scan pull requests and keep your code repositories safe from supply chain attacks.
Read the full articleYou might also wanna read
@gkiely/safe-install: npm Package for Trusted Dependency Installs with Locked-Down Lifecycle Scripts
Run npm installs with lifecycle scripts disabled, then rebuild explicitly trusted dependencies.. Latest version: 0.1.9, last published: 20 m
npm·2mo ago
DepsGuard: Open-source Rust tool to harden package manager configs against supply chain attacks
Harden your package manager configs against supply chain attacks. - arnica/depsguard
github.com·1mo ago
GitHub Actions' Package Manager Lacks Critical Security Features
GitHub Actions has a package manager that ignores decades of supply chain security best practices: no lockfile, no integrity verification, n
NPM Security Best Practices Guide for Preventing Supply Chain Attacks
A list to stay safe from NPM supply chain attacks. Contribute to bodadotsh/npm-security-best-practices development by creating an account on
github.com·9mo ago
Growing Threat of Malicious Attacks via Open-Source Packages
Kaspersky GReAT experts uncover malicious extensions for Cursor AI that download the Quasar backdoor and a crypto stealer.
securelist.com·1y ago
GitHub Launches Immutable Releases for Enhanced Software Supply Chain Security
GitHub releases now support immutability, adding a new layer of supply chain security. With immutable releases, assets and tags are protecte
github.blog·8mo ago
Comments
Sign in to join the conversation.
No comments yet. Be the first.