Get the latest tech news

Disrupting supply chain attacks on NPM and GitHub Actions


Explore the changes we've shipped across npm and GitHub Actions over the past few months to disrupt supply chain attack techniques and limit their impact.

None

Get the Android app

Or read this on Hacker News

Read more on:

Photo of npm

npm

Photo of supply chain attacks

supply chain attacks

Photo of github actions

github actions

Related news:

News photo

GitHub, PyPI add time-based defenses against supply chain attacks

News photo

NPM's release cooldown is security theater

News photo

Injective SDK on npm infected with cryptocurrency wallet stealer