DEV Community

#supplychain

Posts

👋 Sign in for the ability to sort posts by relevant, latest, or top.
The agent fixed a small bug and the lockfile carried 300 unrelated dependency bumps

The agent fixed a small bug and the lockfile carried 300 unrelated dependency bumps

Comments 2
2 min read
The EDI 861, Decoded: Receiving Advice Is How the Buyer Confirms What Actually Arrived

The EDI 861, Decoded: Receiving Advice Is How the Buyer Confirms What Actually Arrived

Comments
4 min read
GhostAction used about 1,900 stolen GitHub logins to plant secret-stealing workflows in 30,000 repos

GhostAction used about 1,900 stolen GitHub logins to plant secret-stealing workflows in 30,000 repos

Comments
3 min read
Software Integrity глазами Security Director или нескромный вопрос о том как искать backdoors и недекларированные возможности в коммерческом ПО

Software Integrity глазами Security Director или нескромный вопрос о том как искать backdoors и недекларированные возможности в коммерческом ПО

Comments
16 min read
Three gates before your first npm publish: 2FA, provenance, and staged releases

Three gates before your first npm publish: 2FA, provenance, and staged releases

1
Comments
6 min read
The EDI 865, Decoded: Answering a Change Is Where the New Promise Is Actually Made

The EDI 865, Decoded: Answering a Change Is Where the New Promise Is Actually Made

Comments
5 min read
A maintained package can still ship malware. What a health check can and can't see.

A maintained package can still ship malware. What a health check can and can't see.

Comments 2
11 min read
A self-hosted CI runner is a credential store that also executes whatever the repository says

A self-hosted CI runner is a credential store that also executes whatever the repository says

1
Comments 1
4 min read
The EDI 860, Decoded: A Purchase Order Change Is a New Promise, Not an Edit

The EDI 860, Decoded: A Purchase Order Change Is a New Promise, Not an Edit

Comments
5 min read
When the Server Is the Attacker: curl CVE-2026-92392 and the Embedded libcurl You Forgot About

When the Server Is the Attacker: curl CVE-2026-92392 and the Embedded libcurl You Forgot About

Comments
4 min read
81,570 Nexus Titles Against 33,873 Fingerprints: The Artefact Store Everything Builds From

81,570 Nexus Titles Against 33,873 Fingerprints: The Artefact Store Everything Builds From

Comments
3 min read
The EDI 852, Decoded: Product Activity Is How a Retailer Tells You What Actually Sold

The EDI 852, Decoded: Product Activity Is How a Retailer Tells You What Actually Sold

Comments
5 min read
Hacker breached LiteLLM and uploaded malicious software update

Hacker breached LiteLLM and uploaded malicious software update

Comments
2 min read
Harbor's Search API Answered Without Authorisation, and the Vendor Called It a Feature

Harbor's Search API Answered Without Authorisation, and the Vendor Called It a Feature

Comments
3 min read
Beyond Barcode Scanning: How AI and Machine Vision Improve Warehouse Picking

Beyond Barcode Scanning: How AI and Machine Vision Improve Warehouse Picking

Comments
5 min read
👋 Sign in for the ability to sort posts by relevant, latest, or top.