The „good news” is that code injections are still widely popular in a form of su...

The „good news” is that code injections are still widely popular in a form of supply chain attacks.

And this is also our fault, e.g. due to the explosion of dependency hell in npm libraries.

This is probably the best intro to modern supply chain attacks and detection techniques, just shared with my team this week:

(edit: removed youtube tracking)

dns_snek on Aug 30, 2023 [–]

Is this an ad? The video is essentially an ad for the vendor's solution that's unrelated to the original post.