Safeguard
Tag

supply-chain-attacks

Safeguard articles tagged "supply-chain-attacks" — guides, analysis, and best practices for software supply chain and application security.

58 articles

Threat Intelligence

Clop/Cl0p Supply Chain Exploitation Patterns

Clop has industrialized third-party file-transfer exploitation. Here is how the group operates, what it keeps repeating, and how defenders can stop repeating their own mistakes.

Jan 23, 20266 min read
Incident Analysis

Polyfill.io CDN Supply Chain Attack: 100K+ Sites

After a domain handover, polyfill.io began serving malware to more than 100,000 sites. Here is the attack chain and what the incident teaches us.

Jan 23, 20266 min read
Incident Response

Incident Response Playbook for Supply Chain Attacks

Supply chain attacks break your standard IR playbook. The compromise originates outside your perimeter, affects trusted software, and the blast radius is unknown. Here's how to adapt.

Jan 19, 20269 min read
Incident Analysis

Lottie Player npm Supply Chain Attack Explained

A leaked maintainer token published three trojanized versions of @lottiefiles/lottie-player to npm, targeting wallet drains. Here is the mechanics.

Jan 19, 20267 min read
Threat Analysis

Browser Extension Supply Chain Attacks: The Overlooked Threat Vector

Browser extensions have become a prime target for supply chain attackers. With access to browsing data, credentials, and session tokens, a compromised extension is a skeleton key to your organization.

Jan 18, 20267 min read
Business Continuity

Business Continuity Planning for Supply Chain Attacks

When a critical dependency is compromised or disappears, can your business keep running? Most organizations haven't answered this question honestly.

Jan 16, 20266 min read
Supply Chain Attacks

The State of Software Supply Chain Attacks: Mid-2022 Report

By mid-2022, supply chain attacks had surged 742% over the previous three years. Here's the data, the trends, and what defenders need to know.

Jan 14, 20266 min read
Incident Analysis

tj-actions/changed-files Compromise: What Happened

A March 2025 GitHub Action compromise rewrote every tagged version to leak secrets. Here is the timeline, attack chain, and what repos need to change.

Jan 14, 20267 min read
Incident Analysis

Ultralytics PyPI Compromise: Dec 2024 Post-Mortem

How a GitHub Actions cache poisoning attack pushed a crypto miner into Ultralytics 8.3.41 on PyPI, and what engineering teams should actually change.

Jan 9, 20267 min read
Supply Chain Attacks

npm Supply Chain Attacks: 2022 Q1 Report

The first quarter of 2022 saw a surge in npm malware — from protestware to dependency confusion to credential-stealing packages. Here's a roundup of the most significant incidents and emerging trends.

Jan 8, 20265 min read

Self-healing security runs on Safeguard.

Your first fix PR is minutes away.

No sales call required, even your agent can complete the purchase over MCP.

supply-chain-attacks (Page 5) — Safeguard Blog