How Packages’ External Resources Threaten Your Supply Chain

Maciej Mensfeld July 15, 2021 0 min read

Supply Chain Security

Supply Chain Security Tips That Won’t Slow Development Down

Supply Chain Security Tips That Won’t Slow Development Down

Table of Contents

Manage open source risk

Read the report

About the author

Maciej Mensfeld

Senior Product Manager for Software Supply Chain Security

Maciej Mensfeld writes mostly about Supply Chain Security and Open Source Software. He is the creator of the Diffend security platform. He has over 16 years of experience designing and building systems with performance, scaling, and quality in mind. He is an active OSS contributor and maintainer of various projects.

Recent resources

More than 100K sites impacted by Polyfill supply chain attack

Tom Abai 1 Jul 2024

Malicious Packages

The new Chinese owner tampers with the code of cdn.polyfill.io to inject malware targeting mobile devices.

Threat Hunting 101: Five Common Threats to Look For

AJ Starita 30 May 2024

Malicious Packages

Learn more about supply chain threats and where to find them.

Critical Backdoor Found in XZ Utils (CVE-2024-3094) Enables SSH Compromise 1

Tom Abai, Dor Hayun 31 Mar 2024

Malicious Packages

Discover how CVE-2024-3094 affects XZ Utils and enables SSH compromise. Get insights on detection, mitigation, and system security.