Blog & Digital Garden

💣 Supply Chain Attacks (7)

1. ⭐ 🔗 Let's talk about supply chain attacks and backdoored dependencies
2. ⭐ 🔗 Supply chain attacks - Microsoft
3. 🔗 Backdoored Python Library Caught Stealing SSH Credentials
4. 🔗 Dev corrupts NPM libs 'colors' and 'faker' breaking thousands of apps
5. 🔗 Malicious ‘SentinelOne’ PyPI package steals data from developers
6. 🔗 NPM supply-chain attack impacts hundreds of websites and apps
7. 🔗 Two malicious Python libraries caught stealing SSH and GPG keys
   (2) https://news.ycombinator.com/item?id=21701488