What is a supply chain attack when it comes to packages? I'd at least include th... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		theogravity on March 2, 2022 \| parent \| context \| favorite \| on: Show HN: Socket – Secure your JavaScript supply ch... What is a supply chain attack when it comes to packages? I'd at least include that in the FAQ as I couldn't figure it out.

feross on March 2, 2022 [–]

Thanks for the feedback.

You might enjoy this blog post which explains supply chain attack at length and starts off with a concrete example of a recent supply chain attack (the ua-parser-js attack): https://socket.dev/blog/inside-node-modules

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact