Disrupting supply chain attacks on NPM and GitHub Actions(github.blog)77 points by nyku 2 months ago | 26 comments
Composer leaks contents of tokens configured as GitHub OAuth tokens(github.com)54 points by damienwebdev 5 months ago | 20 comments
Supply chain nightmare: How Rust will be attacked and what we can do to mitigate(kerkour.com)92 points by fanf2 6 months ago | 51 comments