Record · corpus.blog/posts/01a0874b-1040-72ac-b4bb-e610d5d4d92d

A Deep Dive into npm Supply Chain Attacks and Defense

blog.huli.tw · published 25 May 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at blog.huli.tw Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
Links from this post: 29
Words captured: 5,245

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://github.com/expressjs/express/blob/v5.2.1/package.json

github.com

https://www.npmjs.com/package/statuses

npmjs.com

https://pkg.go.dev/net/http

pkg.go.dev

https://docs.python.org/3/library/http.html

docs.python.org

https://www.npmjs.com/package/mongose

npmjs.com

https://docs.npmjs.com/cli/v11/using-npm/scripts

docs.npmjs.com

https://github.com/puppeteer/puppeteer/blob/af1b9be6b6a178f7ea6e197f738ca3cf99d786f7/packages/puppeteer/package.json

github.com

https://cloud.google.com/blog/topics/threat-intelligence/north-korea-threat-actor-targets-axios-npm-package

cloud.google.com

https://docs.npmjs.com/cli/v11/commands/npm-install

docs.npmjs.com

https://github.com/orgs/pnpm/discussions/8918

github.com

https://github.com/oven-sh/bun/blob/main/src/install/default-trusted-dependencies.txt

github.com

https://github.com/ruby/rubygems/pull/9473

github.com

https://pnpm.io/settings

pnpm.io

https://bun.com/docs/runtime/bunfig

bun.com

https://docs.socket.dev/docs/socket-firewall-overview

docs.socket.dev

https://www.verdaccio.org/

verdaccio.org

https://jsr.io/

jsr.io

https://www.npmjs.com/package/zod

npmjs.com

https://www.npmjs.com/package/@n8n/instance-ai?activeTab=code

npmjs.com

https://www.bleepingcomputer.com/news/software/npm-package-with-14m-weekly-downloads-ditches-npmjscom-for-own-cdn/

bleepingcomputer.com

https://git.sheetjs.com/sheetjs/sheetjs

git.sheetjs.com

https://docs.sheetjs.com/docs/getting-started/installation/nodejs

docs.sheetjs.com

https://www.npmjs.com/package/system-font-families

npmjs.com

https://www.koi.ai/blog/packagegate-6-zero-days-in-js-package-managers-but-npm-wont-act

koi.ai

https://docs.npmjs.com/cli/v11/using-npm/config

docs.npmjs.com

https://github.blog/changelog/2026-02-18-npm-bulk-trusted-publishing-config-and-script-security-now-generally-available/

github.blog

https://pnpm.io/supply-chain-security

pnpm.io

https://socket.dev/features/firewall

socket.dev

https://code.visualstudio.com/docs/devcontainers/containers

code.visualstudio.com