corpus.blog
43,567 blogs · 5,563,491 posts Claim your blog
Back to safedep.io
Blog · corpus.blog/blogs/safedep.io/posts

safedep.io

safedep.io

2025

Shai-Hulud 2.0 npm Supply Chain Attack Technical Analysisoriginal ↗
24 Nov 2025
An Opinionated Approach for Frontend Testing for Startupsoriginal ↗
28 Oct 2025
Curious Case of Embedded Executable in a Newly Introduced Transitive Dependencyoriginal ↗
27 Oct 2025
Malicious npm Packages Impersonating Hyatt Internal Dependenciesoriginal ↗
23 Oct 2025
Contributing to SafeDep Open Source Projects during Hacktoberfest 2025original ↗
6 Oct 2025
Ship Code. Not Malware. SafeDep Launches GitHub App for Malicious Package Protectionoriginal ↗
25 Sept 2025
Shai-Hulud Supply Chain Attack Incident Responseoriginal ↗
22 Sept 2025
Diff-based SCA with AI is Broken — Real Examples from Pipfile.lock, yarn.lock, and Cargo.lockoriginal ↗
19 Sept 2025
npm Supply Chain Attack Exposes Private Repositories, AWS Credentials and Moreoriginal ↗
16 Sept 2025
npm Supply Chain Attack: Multiple Popular Packages Hijacked (1B+ Weekly Downloads)original ↗
8 Sept 2025
nx Build System Compromised Targeting Linux and MacOS developersoriginal ↗
27 Aug 2025
TensorFlow.js Typosquatting Attack: Malicious Package Targeting AI/ML Developersoriginal ↗
12 Aug 2025
Multiple Malicious Python Packages Targeting Bittensor Crypto Developersoriginal ↗
12 Aug 2025
Security Risks in PEP 723 and uv: Inline Metadata Gone Wrong?original ↗
1 Aug 2025
Secure Vibe Coding with AI Agentsoriginal ↗
25 Jul 2025
eslint-config-prettier Compromised: How npm Package with 30 Million Downloads Spread Malwareoriginal ↗
21 Jul 2025
SBOM Completeness with Direct & Transitive Dependenciesoriginal ↗
5 Jul 2025
SBOM and the EU Cyber Resilience Act (CRA) – What Software Vendors Need to Knoworiginal ↗
13 Jun 2025
Introducing SafeDep Model Context Protocol (MCP) Server to Secure AI Generated Codeoriginal ↗
6 Jun 2025
License Compliance with SBOMoriginal ↗
5 Jun 2025
Introducing Container Image Scanningoriginal ↗
3 Jun 2025
Software Bill of Materials: Foundation for Trust in Software Supply Chainoriginal ↗
1 Jun 2025
Catching the Silent Threat: How Dynamic Analysis Revealed a Complex npm Attack Chainoriginal ↗
19 May 2025
Introducing Package Manager Guard (PMG)original ↗
15 May 2025
Dynamic Malware Analysis of Open Source Packages at Scaleoriginal ↗
1 May 2025
Malicious npm Package Impersonating Popular Express Cookie Parseroriginal ↗
23 Apr 2025
Malicious npm Package Impersonating Java SLF4Joriginal ↗
21 Apr 2025
Announcing DefectDojo Integrationoriginal ↗
14 Apr 2025
Analysis of 5000+ Malicious Open Source Packagesoriginal ↗
10 Apr 2025
🚀 Introducing GitLab CI/CD Componentoriginal ↗
31 Mar 2025
Agentic Workflows for Malicious Package Analysisoriginal ↗
28 Mar 2025
Typosquatt alert ! Malicious npm Package: nyc-configoriginal ↗
13 Mar 2025
Introducing vetpkg.dev - Open Source Component Security Dashboardoriginal ↗
18 Feb 2025
Eliminating SCA Noise using Dependency Usage Evidenceoriginal ↗
7 Feb 2025
What is Next Generation Software Composition Analysis?original ↗
6 Feb 2025
Malicious npm Packages using Burp Collaborator for Dependency Confusion Attackoriginal ↗
16 Jan 2025

2024

npm - The Playground for Malicious Packagesoriginal ↗
11 Dec 2024
Malicious Open Source Library Analysis: llm-oracle and its Payloadoriginal ↗
4 Nov 2024
How a Security Team use Policy as Code for Open Source Securityoriginal ↗
22 Oct 2024
SQL Query Interface over SBOM using SafeDep Cloudoriginal ↗
18 Oct 2024
Why Open Source Risks are Larger than SCA Toolsoriginal ↗
3 Oct 2024
Sneak Peak into SafeDep Cloud Development and SQL Queriesoriginal ↗
30 Sept 2024
Safe and Secure Consumption of Open Source Librariesoriginal ↗
15 Sept 2024
Previous