@sonatype_blog Trust What Ships: Your Repository Is Now Your First Defense #SoftwareSupplyChain #DevSecOps #OpenSource
@socket Agent Baseline Publishes Security Reference Architecture for Software Factories #SoftwareSupplyChain #OpenSource #Security
@cyberscoop Your AI agent is only as safe as the packages it downloads #AI #Cybersecurity #SoftwareSupplyChain
@stepsecurity SubQuery Ecosystem Compromise: Hidden Credential Theft and Backdoors #CyberSecurity #DevSecOps #SoftwareSupplyChain
@1password_blog Chainguard's CTO on why every build needs an identity #Security #Identity #SoftwareSupplyChain
@stepsecurity Dev Machine Guard Now Inventories Browser Extensions on Developer Machines #Security #DevOps #SoftwareSupplyChain
@stepsecurity 2026 Mid-Year Update: On Pace for Our Biggest Year Yet #Security #DevSecOps #SoftwareSupplyChain
@hackernews In-toto: A framework to secure the integrity of software supply chains #HackerNews #Tech #SoftwareSupplyChain
@stepsecurity Miasma npm Supply Chain Attack: Self-Spreading Worm via Phantom Gyp #CyberSecurity #SoftwareSupplyChain #OpenSource
@lobsters Nix is set to revolutionize the software supply chain #Nix #SoftwareSupplyChain #DevOps
@stepsecurity Shai-Hulud: Here We Go Again. Mass npm Supply Chain Attack Hits the AntV Ecosystem #CyberSecurity #SoftwareSupplyChain #Npm
@stepsecurity A Mini Shai-Hulud Has Appeared: Obfuscated Bun Runtime Payloads Hit SAP-Related npm Packages #CyberSecurity #SoftwareSupplyChain #BunJS
@stepsecurity Securing Vibe Coding and AI Coding Agents: An End-to-End Approach with StepSecurity #AISecurity #DevSecOps #SoftwareSupplyChain
@stepsecurity axios Compromised on npm - Malicious Versions Drop Remote Access Trojan #Security #OpenSource #SoftwareSupplyChain
@stepsecurity CanisterWorm: How a Self-Propagating npm Worm Is Spreading Backdoors Across the Ecosystem #Security #SoftwareSupplyChain #npm
@jvm_advent Strengthening your Software Supply Chain #DevOps #SoftwareSupplyChain #Java