Tag

dev-environment-hardening

Safeguard articles tagged "dev-environment-hardening" — guides, analysis, and best practices for software supply chain and application security.

1 article

Supply Chain Attacks

How npm's default install behavior leaked macOS text-replacement secrets

npm auto-runs postinstall scripts with zero prompts on every install — a design choice Snyk showed in June 2023 can pull sensitive data out of macOS defaults.

Jul 8, 20266 min read