supply-chain

2 articles

Supply Chain Security for npm Packages

How to protect your JavaScript projects from supply chain attacks — covering dependency auditing, lockfile integrity, typosquatting detection, and automated vulnerability scanning in CI pipelines.

Feb 19, 2022·4 min read

Diagram showing a malicious public package overriding a private internal package through version number manipulation

Security

Dependency Confusion Attacks and How to Prevent Them

How dependency confusion attacks exploit package managers to inject malicious code — and the concrete defenses you can implement to protect your software supply chain.

Oct 21, 2021·4 min read

View all articles