Tag

c-plus-plus

Safeguard articles tagged "c-plus-plus" — guides, analysis, and best practices for software supply chain and application security.

1 article

Supply Chain Security

The C++ supply chain has no npm — and that's the risk

C++ has no single package registry like npm or PyPI, so vendored code hides provenance — the XZ Utils backdoor (CVE-2024-3094, CVSS 10.0) shows the cost.

Jul 11, 20266 min read