Sign up for our newsletter!
Stay informed on the latest DevOps news

DevOps.com

Tag: software supply chain attacks

repositories, GitHub, Arm, extension, GitHub, Copilot, Git, bloat, malicious, GitLab, memory-safe, CISA, agency, Skillsoft GitHub GitKraken code QA

GitHub Action Compromise Risks Data Leaks for 23,000 Repositories

| | GitHub Actions, leaked secrets, Python, software supply chain attacks
The attacker introduced malicious Python code that would expose secrets like authentication credentials in public repositories ...
code data, agentic, JFrog, security, devsecops, Digma, code, Go, code, kernel, eBPF, Veracode GitKraken JFrog GitGuardian organizations, quality fear unknown software app Rust Contrast Security Adds API Support to Application Security Platform

Typosquat Supply Chain Attack Targets Go Developers

| | GitHub repositories, Golang, malicious code, software supply chain attacks
A backdoor that impersonates a widely used database module in the popular Go programming language can give hackers control of infected systems, according to a senior threat intelligence analyst with developer-focused platform ...
repositories, GitHub, Arm, extension, GitHub, Copilot, Git, bloat, malicious, GitLab, memory-safe, CISA, agency, Skillsoft GitHub GitKraken code QA

More Than 3,000 ‘Ghost’ Accounts Spreading Malware on GitHub

| | GitHub repositories, malicious code, malware, software supply chain attacks
GitHub and similar open-source code and project repositories have become a common target of cybercriminals looking to lure developers into unknowingly downloading malicious scripts ...
npm is Scam-Spam Cesspool ¦ Google in Microsoft Antitrust Thrust

npm is Scam-Spam Cesspool ¦ Google in Microsoft Antitrust Thrust

| | Amit Zavery, azure, code repo, code repositories, code repository, GOOG, GOOGL, google, Google Cloud, IaaS, microsoft, Microsoft Azure, MSFT, NPM, npm registry, open source, public repository, Repos, repositories, repository, Repository Security, SEO, Software Supply Chain, software supply chain attacks, Software Supply Chain Security, Software Supply Chains, softwaresupplychain, source code repository, spam, supply chain, supply chain attacks, supply chain security, The Long View
In this week’s #TheLongView: The npm registry suffers spam infestation, and Microsoft makes Google sad ...
Endor, SCA, supply chain, security, workflows, supply chain, software, supply chain security, appsec, polyfill, software, supply chains, DevOps, DevSecOps, Google supply chain

Addressing Software Supply Chain Security

| | DAST, SAST, SCA, Software Supply Chain, software supply chain attacks, Software Supply Chain Security
It’s essential for organizations to learn more about the software supply chains they rely on and the steps needed to secure them. In just the past few years, we have seen a ...