Tag: developer-security
| # | Post Title | Date | User |
| Working Claude Code clones on npm: what it means for IAM teams | 2 months ago | NHI Mgmt Group | |
| nvm mirror trust failures: what application security teams need now | 2 months ago | NHI Mgmt Group | |
| Supply-chain execution risk in npm and PyPI: what changed now? | 2 months ago | NHI Mgmt Group | |
| Hades PyPI campaign: what MCP and AI teams need to know | 2 months ago | NHI Mgmt Group | |
| Malicious npm telemetry can hide identity exfiltration at install time | 2 months ago | NHI Mgmt Group | |
| PolinRider across npm, Go and VS Code: what defenders miss | 2 months ago | NHI Mgmt Group | |
| Claude Code trust bypass: what it means for AI agent governance | 2 months ago | NHI Mgmt Group | |
| Nx supply chain attack: what it means for developer identity controls | 2 months ago | NHI Mgmt Group | |
| AI coding agent persistence: what security teams need to change now | 2 months ago | NHI Mgmt Group | |
| Snyk vs Veracode: are your AppSec controls closing the fix gap? | 2 months ago | NHI Mgmt Group | |