Tag
maintainer-trust
Safeguard articles tagged "maintainer-trust" — guides, analysis, and best practices for software supply chain and application security.
2 articles
Vulnerability Analysis
event-stream (2018): When a Maintainer Handoff Became a Supply Chain Attack
A factual account of the 2018 event-stream npm compromise, in which a new maintainer added a malicious dependency targeting a specific cryptocurrency wallet, and what it revealed about maintainer-trust risk.
Sep 17, 20262 min read
Open Source Security
The XZ Utils Incident as a Case Study in Maintainer Trust...
CVE-2024-3094 shows how a patient social-engineering campaign turned trusted open source maintainership into a near-catastrophic SSH backdoor.
May 26, 20267 min read
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.