--- title: "#software-supply-chain-security articles | Hashnode" description: "Explore 22 articles tagged #software-supply-chain-security on Hashnode. Tutorials, guides, and how-tos from the community." url: "https://hashnode.com/tag/software-supply-chain-security" --- Tag # #software-supply-chain-security 22 posts · 4 followers [infosprint technologies](https://hashnode.com/@infosprint) · [Sep 1](https://hashnode.com/posts/software-supply-chain-security-what-changes-when-trusted-code-enters-production/6a96a1debd281d47c3f2b378) ### [Software Supply Chain Security: What Changes When Trusted Code Enters Production](https://infosprinttechnologies.hashnode.dev/software-supply-chain-security-what-changes-when-trusted-code-enters-production?utm_source=hashnode&utm_medium=feed) Explore software supply chain security and why trusted code needs security controls before it reaches production. 7 min read · [infosprinttechnologies.hashnode.dev](https://infosprinttechnologies.hashnode.dev/software-supply-chain-security-what-changes-when-trusted-code-enters-production?utm_source=hashnode&utm_medium=feed) [Lưu Tuấn Anh](https://hashnode.com/@anhlt120) · [Jul 28](https://hashnode.com/posts/asyncapi-under-attack-when-2-million-downloads-per-week-becomes-a-way-to-spread-malware/6a68718bdf6766cce66fbe99) ### [AsyncAPI Under Attack: When 2 Million Downloads Per Week Becomes a Way to Spread Malware](https://blog.fiscybersec.com/asyncapi-under-attack-when-2-million-downloads-per-week-becomes-a-way-to-spread-malware?utm_source=hashnode&utm_medium=feed) Campaign Summary On July 14, 2026, attackers successfully compromised the AsyncAPI organization on npm — one of the most popular open source projects for event-driven APIs, and injected malicious code 16 min read · [blog.fiscybersec.com](https://blog.fiscybersec.com/asyncapi-under-attack-when-2-million-downloads-per-week-becomes-a-way-to-spread-malware?utm_source=hashnode&utm_medium=feed) [Kagen AI](https://hashnode.com/@kagenai) · [Apr 6](https://hashnode.com/posts/why-zero-trust-application-security-is-the-most-effective-defense-against-modern-supply-chain-attacks/69d3827540c9cabf44ef4079) ### [Why Zero Trust Application Security Is the Most Effective Defense Against Modern Supply-Chain Attacks](https://unified-application-security-platform.hashnode.dev/why-zero-trust-application-security-is-the-most-effective-defense-against-modern-supply-chain-attacks?utm_source=hashnode&utm_medium=feed) Modern supply chain attacks are harder to detect and faster to spread. Learn how Zero Trust application security helps minimize risk, verify every acc 4 min read · [unified-application-security-platform.hashnode.dev](https://unified-application-security-platform.hashnode.dev/why-zero-trust-application-security-is-the-most-effective-defense-against-modern-supply-chain-attacks?utm_source=hashnode&utm_medium=feed) [Germain Olea](https://hashnode.com/@djuhnix) · [Mar 2](https://hashnode.com/posts/ssdlc-et-devsecops/69a5c218708a82a72d8afd8b) ### [SSDLC et DevSecOps](https://blog.germain.tech/ssdlc-et-devsecops?utm_source=hashnode&utm_medium=feed) Sécuriser vos déploiements sans ralentir vos sprints 7 min read · [blog.germain.tech](https://blog.germain.tech/ssdlc-et-devsecops?utm_source=hashnode&utm_medium=feed) [GitHubOpenSource](https://hashnode.com/@GitHubOpenSource) · [Dec 16, 2025](https://hashnode.com/posts/stop-supply-chain-attacks-guarddog-scans-your-dependencies-for-hidden-malware/6941603e7d1af2ff68ad9ba3) ### [Stop Supply Chain Attacks: GuardDog Scans Your Dependencies for Hidden Malware](https://github-open-source.hashnode.dev/stop-supply-chain-attacks-guarddog-scans-your-dependencies-for-hidden-malware?utm_source=hashnode&utm_medium=feed) 📝 Quick Summary: GuardDog is a command-line interface tool designed to detect malicious packages across various ecosystems including PyPI, npm, Go, GitHub Actions, and VSCode extensions. It employs both source code analysis using Semgrep rules and p... 3 min read · [github-open-source.hashnode.dev](https://github-open-source.hashnode.dev/stop-supply-chain-attacks-guarddog-scans-your-dependencies-for-hidden-malware?utm_source=hashnode&utm_medium=feed) [Lưu Tuấn Anh](https://hashnode.com/@anhlt120) · [Nov 18, 2025](https://hashnode.com/posts/the-owasp-2025-list-has-just-been-announced-risks-you-never-thought-of-are-at-the-top/691c3eb0ac18863ef17ade0f) ### [The OWASP 2025 list has just been announced – risks you never thought of are at the top!](https://blog.fiscybersec.com/the-owasp-2025-list-has-just-been-announced-risks-you-never-thought-of-are-at-the-top?utm_source=hashnode&utm_medium=feed) Overview The year 2025 marked a significant turning point in how we perceive cybersecurity in general and application security in particular. The OWASP Top 10—a list considered the "guiding light" for every AppSec program worldwide—has just officiall... 7 min read · [blog.fiscybersec.com](https://blog.fiscybersec.com/the-owasp-2025-list-has-just-been-announced-risks-you-never-thought-of-are-at-the-top?utm_source=hashnode&utm_medium=feed) [Lưu Tuấn Anh](https://hashnode.com/@anhlt120) · [Nov 18, 2025](https://hashnode.com/posts/danh-sach-owasp-2025-vua-cong-bo-nhung-rui-ro-ban-chua-tung-nghi-toi-lai-dung-top/691c3eec6cf6809ae3989162) ### [Danh sách OWASP 2025 vừa công bố – những rủi ro bạn chưa từng nghĩ tới lại đứng top!](https://blog.fiscybersec.com/danh-sach-owasp-2025-vua-cong-bo-nhung-rui-ro-ban-chua-tung-nghi-toi-lai-dung-top?utm_source=hashnode&utm_medium=feed) Tổng quan Năm 2025 đã đánh dấu một bước ngoặt lớn trong cách chúng ta nhìn nhận về an ninh mạng nói chung và an ninh ứng dụng nói riêng. Bộ OWASP Top 10 – danh sách được coi là “kim chỉ nam” cho mọi chương trình AppSec trên thế giới vừa chính thức cậ... 9 min read · [blog.fiscybersec.com](https://blog.fiscybersec.com/danh-sach-owasp-2025-vua-cong-bo-nhung-rui-ro-ban-chua-tung-nghi-toi-lai-dung-top?utm_source=hashnode&utm_medium=feed) [Hare Krishna Rai](https://hashnode.com/@harekrishnarai) · [Sep 18, 2025](https://hashnode.com/posts/the-shai-hulud-worm-dissecting-the-self-spreading-malware-attack-on-the-npm-ecosystem/68cc650d91b31302fa63efad) ### [The Shai-Hulud Worm: Dissecting the Self-Spreading Malware Attack on the NPM Ecosystem](https://blog.harekrishnarai.me/the-shai-hulud-worm-dissecting-the-self-spreading-malware-attack-on-the-npm-ecosystem?utm_source=hashnode&utm_medium=feed) Learn about the Shai-Hulud worm, a groundbreaking self-propagating malware that targeted the npm ecosystem, its impact, and protective measures 14 min read · [blog.harekrishnarai.me](https://blog.harekrishnarai.me/the-shai-hulud-worm-dissecting-the-self-spreading-malware-attack-on-the-npm-ecosystem?utm_source=hashnode&utm_medium=feed) [Hare Krishna Rai](https://hashnode.com/@harekrishnarai) · [Aug 27, 2025](https://hashnode.com/posts/the-nx-supply-chain-attack-when-ai-becomes-an-accomplice-attackers/68af4ebc9c3d938c1fe43e72) ### [The Nx Supply Chain Attack: When AI Becomes an Accomplice Attackers](https://blog.harekrishnarai.me/the-nx-supply-chain-attack-when-ai-becomes-an-accomplice-attackers?utm_source=hashnode&utm_medium=feed) The Nx build system faces a supply chain attack using AI tools, exposing new cyber threat vectors for developers in 2025 8 min read · [blog.harekrishnarai.me](https://blog.harekrishnarai.me/the-nx-supply-chain-attack-when-ai-becomes-an-accomplice-attackers?utm_source=hashnode&utm_medium=feed) [Hare Krishna Rai](https://hashnode.com/@harekrishnarai) · [Apr 19, 2025](https://hashnode.com/posts/slopsquatting-an-emerging-threat-to-developers-using-ai-powered-ides/680422b447c6fe74a8c5ef86) ### [Slopsquatting: An Emerging Threat to Developers Using AI-Powered IDEs](https://blog.harekrishnarai.me/slopsquatting-an-emerging-threat-to-developers-using-ai-powered-ides?utm_source=hashnode&utm_medium=feed) Learn how AI-powered IDEs like CursorAI,GitHub Copilot face slopsquatting threats and discover ways to secure your development projects against such attacks 4 min read · [blog.harekrishnarai.me](https://blog.harekrishnarai.me/slopsquatting-an-emerging-threat-to-developers-using-ai-powered-ides?utm_source=hashnode&utm_medium=feed)