Supply Chain Attacks on Linux Distributions – Fedora Pagure(fenrisk.com)

186 points by akyuu 1 year ago | 68 comments

Disrupting supply chain attacks on NPM and GitHub Actions(github.blog)

77 points by nyku 2 months ago | 26 comments

Telnyx package compromised on PyPI(telnyx.com)

118 points by ramimac 7 months ago | 117 comments

Telnyx Python SDK: Supply Chain Security Notice(telnyx.com)

11 points by KomoD 7 months ago | 4 comments

Public secrets exposure leads to supply chain attack on GitHub CodeQL(praetorian.com)

285 points by cyberbender 1 year ago | 53 comments

Polyfill supply chain attack hits 100K+ sites(sansec.io)

738 points by gnabgib 2 years ago | 304 comments

Sansec threat research post reporting that the new Chinese owner of the Polyfill JS project is injecting malware into more than 100,000 websites.