corpus.blog
41,554 blogs · 5,197,919 posts Claim your blog
Record · corpus.blog/posts/01a0f0f7-22e3-7395-8034-1cc2d78ffc82

Strengthening supply chain security: Preparing for the next malware campaign

GitHub · published 23 December 2025

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at github.blog Wayback capture
2blogs citing
First cited
3 Feb 2026
Most recent
5 Apr 2026
Rank this month
not ranked
External links
26
Words captured
1,124

Cited by

Blog
In the post
Date
Przemysław Kołodziejczyk
How to protect your project from npm supply chain attacks Read at the source ↗
5 Apr 2026
blog.ulisesgascon.com
Secure npm package publishing in 2026: A Complete Guide Read at the source ↗
3 Feb 2026

Links from this post

Link
Host
https://docs.github.com/en/authentication/securing-your-account-with-two-factor-authentication-2fa/configuring-two-factor-authentication
docs.github.com
https://docs.npmjs.com/configuring-two-factor-authentication
docs.npmjs.com
https://pypi.org/help/
pypi.org
https://guides.rubygems.org/setting-up-multifactor-authentication/
guides.rubygems.org
https://learn.microsoft.com/en-us/nuget/nuget-org/individual-accounts
learn.microsoft.com
https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/token-expiration-and-revocation
docs.github.com
https://docs.github.com/en/organizations/managing-programmatic-access-to-your-organization/setting-a-personal-access-token-policy-for-your-organization
docs.github.com
https://docs.github.com/en/apps/using-github-apps/reviewing-and-revoking-authorization-of-github-apps
docs.github.com
https://github.com/features/codespaces
github.com
https://docs.github.com/en/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches
docs.github.com
https://docs.npmjs.com/trusted-publishers
docs.npmjs.com
https://docs.pypi.org/trusted-publishers/
docs.pypi.org
https://guides.rubygems.org/trusted-publishing
guides.rubygems.org
https://learn.microsoft.com/en-us/nuget/nuget-org/trusted-publishing
learn.microsoft.com
https://docs.github.com/en/actions/reference/security/secure-use
docs.github.com
https://docs.github.com/en/code-security/code-scanning/enabling-code-scanning/configuring-default-setup-for-code-scanning
docs.github.com
https://docs.github.com/en/code-security/code-scanning/managing-code-scanning-alerts/resolving-code-scanning-alerts
docs.github.com
https://developer.mozilla.org/en-US/docs/Web/Security/Defenses/Subresource_Integrity
developer.mozilla.org
https://docs.github.com/en/actions/how-tos/secure-your-work/use-artifact-attestations/use-artifact-attestations
docs.github.com
https://support.github.com/
support.github.com
https://docs.npmjs.com/reporting-malware-in-an-npm-package
docs.npmjs.com
https://github.com/advisories?query=type%3Amalware
github.com
https://docs.github.com/en/code-security/getting-started/quickstart-for-securing-your-repository
docs.github.com
https://docs.github.com/en/code-security/supply-chain-security/understanding-your-software-supply-chain/about-dependency-review
docs.github.com
https://github.com/ossf/package-manager-best-practices/blob/main/published/npm.md
github.com
https://www.microsoft.com/en-us/security/blog/2025/12/09/shai-hulud-2-0-guidance-for-detecting-investigating-and-defending-against-the-supply-chain-attack/
microsoft.com
Elsewhere on github.blog (3)