Tag: npm
| # | Post Title | Date | User |
| NPM supply chain compromise: what it means for dependency governance | 2 months ago | NHI Mgmt Group | |
| Web3 npm typosquatting: what security teams need to act on | 2 months ago | NHI Mgmt Group | |
| Mastra supply chain attack: what AppSec teams need to re-check now | 2 months ago | NHI Mgmt Group | |
| Dependency confusion in npm packages: what DevSecOps teams should do | 2 months ago | NHI Mgmt Group | |
| Shai Hulud 2.0 exposure mapping: are SBOM controls enough? | 2 months ago | NHI Mgmt Group | |
| Npm trust signals are changing fast. What should maintainers watch? | 2 months ago | NHI Mgmt Group | |
| Rollup polyfill malware: what build-tool imports now mean for security | 2 months ago | NHI Mgmt Group | |
| Import-time npm malware: what practitioners need to act on now | 2 months ago | NHI Mgmt Group | |
| Pgserve supply-chain worm: what should SBOM and SCA teams do now? | 2 months ago | NHI Mgmt Group | |
| Malicious npm publication: what it means for supply chain controls | 2 months ago | NHI Mgmt Group | |