Supply Chain Security

Developer Tools 5 min npm v12 Flips Three Install Defaults From Automatic to Opt-In — Prepare Your Pipelines Now GitHub's npm v12, due July 2026, turns three things npm install does automatically today into choices you have... KE Kenji Tanaka 19 Jun Cybersecurity 6 min Three supply-chain incidents this week: Megalodon, Robinsons, and the Laravel-Lang Composer compromise Megalodon pushed 5,718 malicious commits into 5,561 GitHub repos in six hours. The Payload ransomware group li... JE Jeffrey Tan 25 May Cybersecurity 5 min Supply Chain Attacks Hit Record 454,600 Malicious Packages in 2025 — And AI Is to Blame Malicious packages in public software repositories hit 454,600 in 2025, up from 55,000 in 2022. AI-assisted cr... CY Cyber Team 28 Apr