Articles tagged #npm
2 articles
SecuritySupply Chain Attacksnpm
GitHub Actions supply-chain attacks are here, so stop giving CI your release token
How runseal wraps your release step in a kernel-level sandbox, injects phantom credentials, and blocks the network to stop supply-chain attacks that rely on untrusted code running in CI/CD.
Jun 9, 20266 min read
SecuritySupply Chain Attacksnpm
How nono Prevents Supply Chain Attacks: A Case Study of the axios Compromise
How nono's kernel-level sandbox stops supply chain attacks like the axios npm compromise — blocking RAT deployment, credential theft, and exfiltration.
Mar 31, 20268 min read