Supply Chain Attack
3 posts tagged #supply-chain-attack
3 posts on Supply Chain Attack, none of them inside one of the topic pillars — most read: “NPM Supply Chain Attacks: Why Packages Like Axios Get Hit” and “LiteLLM PyPI Supply Chain Attack: How It Stole Credentials”.
Cybersecurity NPM Supply Chain Attacks: Why Packages Like Axios Get Hit
NPM supply chain attacks are escalating fast. Here's how typosquatting, dependency confusion, and malicious packages actually work — and 5 defenses every JavaScript developer needs.
Cybersecurity LiteLLM PyPI Supply Chain Attack: How It Stole Credentials
On March 24, 2026, two backdoored LiteLLM releases on PyPI stole API keys, cloud credentials and Kubernetes secrets from AI developers. Here is what happened and how to protect your infrastructure.
Cybersecurity Glassworm: The Invisible Unicode Attack Hiding in Your Code
Your code reviewer can't catch what they can't see. How invisible Unicode attacks like the 2025 GlassWorm worm hide code, and the CI checks that catch them.
Keep exploring
Close to this topic, not on this page.
