Record · corpus.blog/posts/01a08775-3581-7107-91ef-d610d3c20766

How to protect your project from npm supply chain attacks

Przemysław Kołodziejczyk · published 5 April 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at eshlox.net Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
External links: 19
Words captured: 1,131

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://pnpm.io/supply-chain-security

pnpm.io

https://pnpm.io/settings

pnpm.io

https://github.com/renovatebot/renovate

github.com

https://github.com/dependabot

github.com

https://socket.dev

socket.dev

https://github.com/apps/socket-security

github.com

https://docs.socket.dev/docs/socket-firewall-free

docs.socket.dev

https://docs.socket.dev/docs/socket-for-github

docs.socket.dev

https://www.usenix.org/system/files/sec19-zimmermann.pdf

usenix.org

https://npmx.dev

npmx.dev

https://www.npmjs.com

npmjs.com

https://github.com/es-tooling/module-replacements

github.com

https://docs.npmjs.com/trusted-publishers

docs.npmjs.com

https://github.com/AikidoSec/safe-chain

github.com

https://snyk.io

snyk.io

https://www.stepsecurity.io

stepsecurity.io

https://github.com/bodadotsh/npm-security-best-practices

github.com

Strengthening supply chain security: Preparing for the next malware campaign Read at the source ↗

github.blog

https://www.cisa.gov/news-events/alerts/2025/09/23/widespread-supply-chain-compromise-impacting-npm-ecosystem

cisa.gov