RSRushabh Shahindepwarden.hashnode.dev·15h ago · 4 min readHow npm typosquatting and dependency confusion attacks work (and how to stop them)In February 2021, security researcher Alex Birsan published a paper describing how he had successfully deployed malicious packages to the internal build systems of Apple, Microsoft, PayPal, Shopify, a00
RSRushabh Shahindepwarden.hashnode.dev·Jun 29 · 5 min readSAST vs SCA: why your CI pipeline needs bothWhen security teams talk about "scanning" code in CI/CD, they usually mean one of two very different things: scanning the code you wrote (SAST) or scanning the open-source code you imported (SCA). Bot00
