supply-chain

Python's site-packages mechanism executes any line starting with `import` in a *.pth file at interpreter startup, before user code runs. The compromised litellm 1.82.7/1.82.8 (PyPI, ~40 min live, 2026...

Most recent npm/PyPI compromises were detected and yanked within hours: debug+chalk (~2h live, 2025-09), litellm (~40min, 2026-03), axios (~3h, 2026-04), lottie-player (~2h, 2024-10), ua-parser-js (~4...

Lockfiles (package-lock.json, pnpm-lock.yaml, uv.lock) record the hash of whatever version `install` first saw. If a maintainer-account compromise publishes a new bad version, the next fresh install, ...

Action tags are git tags and can be silently retargeted. A compromised maintainer can repoint @v4 at a malicious commit and every consumer pulls it on the next run. GitHub added an org/enterprise poli...

Unlike `pull_request`, `pull_request_target` runs against the base branch with the target repository's secrets available, while PR-author-controlled fields (title, body, branch name, head ref) feed in...

pnpm moved per-workspace supply-chain controls (minimumReleaseAge, minimumReleaseAgeExclude, onlyBuiltDependencies) out of .npmrc into pnpm-workspace.yaml and the global config.yaml. Settings placed i...