🧰 debug

The items that name it 9

• Dependabot vs Renovate
  articleas affected products2026-09-14It is written here as debug (npm package, compromised release).

  npm package, compromised release

• Why Cooldown Windows Belong in Every npm Security Strategy | Blog | Endor Labs
  articleas affected products2026-09-11It is written here as debug (npm package).

  compromised popular package

• Shai-Hulud was the best thing to happen to supply chain security
  articleas classification.key entities2026-08-24
• What is CVE remediation in 2026?
  articleas affected products2026-08-21It is written here as debug (npm package).

  Compromised with malicious versions pushed through the official npm channel.

• The OpenSourceMalware Show #15
  talkas affected products2026-07-31It is written here as debug (npm package).

  Compromised in September 2025; compromise now attributed by Amazon to DPRK/SAPPHIRE SLEET.

• The upgrade trap: when upgrading is the wrong answer to a CVE
  articleas affected products2026-07-22

  npm package with over two billion downloads a week (combined with chalk); malicious version published via compromised maintainer account

• What is a dependency firewall?
  articleas affected products2026-07-13

  npm package compromised via stolen publish token, part of an 18-package wave with 2 billion+ combined weekly downloads

• AWS Well-Architected: Software Supply Chain Security
  articleas classification.key entities2026-06-04
• Open Source Malware Podcast — episodes
  otheras classification.key entities2026-05-22