Tag: source risks
-
The Register: Not pretty, not Windows-only: npm phishing attack laces popular packages with malware
Source URL: https://www.theregister.com/2025/07/24/not_pretty_not_windowsonly_npm/ Source: The Register Title: Not pretty, not Windows-only: npm phishing attack laces popular packages with malware Feedly Summary: The “is" package was infected with cross-platform malware after a scam targeting maintainers The popular npm package "is" was infected with cross-platform malware, around the same time that linting utility packages used with the…
-
Anchore: SBOMs as the Crossroad of the Software Supply Chain: Anchore Learning Week (Day 5)
Source URL: https://anchore.com/blog/sboms-as-the-crossroad-of-the-software-supply-chain-anchore-learning-week-day-5/ Source: Anchore Title: SBOMs as the Crossroad of the Software Supply Chain: Anchore Learning Week (Day 5) Feedly Summary: Welcome to the final installment in our 5-part series on Software Bills of Materials (SBOMs). Throughout this series, we’ve explored Now, we’ll examine how SBOMs intersect with various disciplines across the software ecosystem.…
-
The Register: From Russia with doubt: Go library’s Kremlin ties stoke fear
Source URL: https://www.theregister.com/2025/05/06/from_russia_with_doubt_go/ Source: The Register Title: From Russia with doubt: Go library’s Kremlin ties stoke fear Feedly Summary: Easyjson library’s presence in numerous open source projects alarms security biz Easyjson, a software library for serializing data in Golang applications, is maintained by developers affiliated with Russia’s VK Group.… AI Summary and Description: Yes Summary:…