Software Supply Chain Archives

Broadcom TrueSource: Verified Open Source for the Enterprise Broadcom TrueSource program securing the open source software supply chain across Spring, Java, Python and Node.js

Hieu Phan Trong September 2, 2026

Broadcom has resolved to make the security of popular open source code its own area of responsibility....

Do Son June 17, 2025

Amid a surge in increasingly sophisticated software supply chain attacks, cybersecurity experts have identified a new wave...

Do Son May 9, 2025

Researchers have uncovered a malicious package in the PyPI repository, masquerading as a utility for working with...

Malicious PyPI Package Steals Crypto Exchange Trading Orders The JSON settings downloaded by the malicious package

Do Son April 18, 2025

Researchers at JFrog have uncovered a malicious package hosted on the official Python Package Index (PyPI). Its...

Software Supply Chain