corpus.blog
56,966 blogs · 4,417,066 posts Claim your blog
Record · corpus.blog/posts/01a08720-5ed5-7359-be7a-ccf611295881

Why “Trusted Publishing” Can’t Save Us from Social Engineering

adventures.nodeland.dev · published 2 May 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at adventures.nodeland.dev Wayback capture
1blogs citing
First cited
9 Jun 2026
Most recent
9 Jun 2026
Rank this month
not ranked
Links from this post
13
Words captured
1,430

Cited by

Blog
In the post
Date
blog.ulisesgascon.com
Newsletter #014: A Flood of Reports and a Fresh Coat of Paint 🎨🔐 Read at the source ↗
9 Jun 2026

Links from this post

Link
Host
https://socket.dev/blog/axios-npm-package-compromised?utm_source=nodeland&utm_medium=email&utm_campaign=why-trusted-publishing-can-t-save-us
socket.dev
https://socket.dev/blog/axios-maintainer-confirms-social-engineering-behind-npm-compromise?utm_source=nodeland&utm_medium=email&utm_campaign=why-trusted-publishing-can-t-save-us
socket.dev
https://socket.dev/blog/attackers-hunting-high-impact-nodejs-maintainers?utm_source=nodeland&utm_medium=email&utm_campaign=why-trusted-publishing-can-t-save-us
socket.dev
https://x.com/feross?utm_source=nodeland&utm_medium=email&utm_campaign=why-trusted-publishing-can-t-save-us
x.com
https://x.com/ljharb?utm_source=nodeland&utm_medium=email&utm_campaign=why-trusted-publishing-can-t-save-us
x.com
https://x.com/jdalton?utm_source=nodeland&utm_medium=email&utm_campaign=why-trusted-publishing-can-t-save-us
x.com
https://x.com/scottmotte?utm_source=nodeland&utm_medium=email&utm_campaign=why-trusted-publishing-can-t-save-us
x.com
https://x.com/wesleytodd?utm_source=nodeland&utm_medium=email&utm_campaign=why-trusted-publishing-can-t-save-us
x.com
https://docs.npmjs.com/generating-provenance-statements?utm_source=nodeland&utm_medium=email&utm_campaign=why-trusted-publishing-can-t-save-us
docs.npmjs.com
https://www.sigstore.dev/?utm_source=nodeland&utm_medium=email&utm_campaign=why-trusted-publishing-can-t-save-us
sigstore.dev
https://socket.dev/blog/axios-supply-chain-attack-reaches-openai-macos-signing-pipeline-forces-certificate-rotation?utm_source=nodeland&utm_medium=email&utm_campaign=why-trusted-publishing-can-t-save-us
socket.dev
https://pnpm.io/settings?utm_source=nodeland&utm_medium=email&utm_campaign=why-trusted-publishing-can-t-save-us
pnpm.io
https://xkcd.com/2347/?utm_source=nodeland&utm_medium=email&utm_campaign=why-trusted-publishing-can-t-save-us
xkcd.com