corpus.blog
42,923 blogs · 5,458,805 posts Claim your blog
Record · corpus.blog/posts/01a087ec-3a34-7107-9857-b96398b888ff

Securing my NPM Supply Chain

thecandidstartup.org · published 23 February 2026

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at thecandidstartup.org Wayback capture
0blogs citing
First cited
—
Most recent
—
Rank this month
not ranked
External links
27
Words captured
5,032

Cited by

No blog we hold has cited this post yet.

Links from this post

Link
Host
https://medium.com/exaforce/supply-chain-security-incident-analysis-of-the-lottiefiles-npm-package-compromise-e8f9d894b1bb
medium.com
https://about.gitlab.com/blog/gitlab-discovers-widespread-npm-supply-chain-attack/
about.gitlab.com
https://www.cisa.gov/news-events/alerts/2025/09/23/widespread-supply-chain-compromise-impacting-npm-ecosystem
cisa.gov
https://www.npmjs.com/search?q=%40candidstartup
npmjs.com
We should all be using dependency cooldowns Read at the source ↗
blog.yossarian.net
https://docs.github.com/en/code-security/tutorials/secure-your-dependencies/dependabot-quickstart-guide
docs.github.com
https://docs.github.com/en/code-security/reference/supply-chain-security/dependabot-options-reference
docs.github.com
https://github.com/TheCandidStartup/infinisheet
github.com
https://pnpm.io/
pnpm.io
https://pnpm.io/supply-chain-security
pnpm.io
https://pnpm.io/installation
pnpm.io
https://github.com/nodejs/corepack
github.com
https://socket.dev/blog/node-js-takes-steps-towards-removing-corepack
socket.dev
https://socket.dev/blog/node-js-tsc-votes-to-stop-distributing-corepack
socket.dev
https://asdf-vm.com/
asdf-vm.com
https://github.com/pnpm/action-setup
github.com
https://britishgeologicalsurvey.github.io/development/migrating-from-npm-to-pnpm/
britishgeologicalsurvey.github.io
https://pnpm.io/only-allow-pnpm
pnpm.io
https://github.com/pnpm/pnpm/issues/9900
github.com
https://github.com/pnpm/pnpm/issues/8081
github.com
https://pnpm.io/workspaces
pnpm.io
https://pnpm.io/catalogs
pnpm.io
https://github.com/pnpm/pnpm/blob/01a0bc9499484fb00066bf9569c07ef1d4a5c651/resolving/npm-resolver/src/trustChecks.ts
github.com
https://www.npmjs.com/package/@storybook/react-vite/v/10.2.8?activeTab=versions
npmjs.com
https://github.com/pnpm/pnpm/issues/10202
github.com
https://github.com/storybookjs/storybook/pull/32607
github.com
https://github.blog/changelog/2023-06-12-dependabot-version-updates-now-supports-pnpm/
github.blog
Elsewhere on thecandidstartup.org (4)