Meta tags:
description=supplychain content on DEV Community;
keywords=software development, engineering, supplychain;

Headings (most frequently used words):

the, to, what, github, is, supply, chain, and, security, your, from, why, llm, how, for, hardening, step, guide, attack, repos, compromised, risk, end, 2026, that, about, supplychain, posts, dev, community, software, containers, actually, are, they, matter, local, best, practices, beyond, basic, hashing, build, secure, homelab, inference, organization, exact, controls, by, setup, shadowfeed, weekly, ironworm, npm, 36m, humanity, protocol, hack, microsoft, rust, crate, onering, malicious, code, exfiltration, mitigated, with, updated, version, 組織向け, セキュリティ, ハードニング完全ガイド, organizations, leopard, head, china, electronics, industry, importers, need, know, trivy, march, shows, where, secret, exposure, hurts, most, cpe, manufacturer, not, building, router, their, sub, contractor, here, matters, bot, never, was, part, miasma, worm, token, survived, hijacked, my, an, azure, ip, new, front, door, may, taught, us, third, party, maintainer, trap, jqwik, incident, reveals, trusting, dependencies, trending, guides, resources,

Text of the page (most frequently used words):
the (29), dev (17), #supply (17), chain (17), supplychain (17), comments (16), follow (16), and (15), github (15), min (15), read (15), security (15), jun (15), comment (14), add (13), your (11), what (10), that (9), for (9), mike (9), anderson (9), why (8), compromised (8), guide (7), npm (7), attack (7), repos (7), with (6), software (6), about (6), jay (6), grider (6), community (5), 2026 (5), code (5), risk (5), how (5), devsecops (5), china (5), their (4), agents (4), dependencies (4), rust (4), bot (4), never (4), was (4), from (4), telecom (4), end (4), hardening (4), step (4), llm (4), create (3), where (3), built (3), organization (3), official (3), search (3), partner (3), cpe (3), manufacturer (3), not (3), building (3), router (3), sub (3), contractor (3), here (3), twelve (3), trust (3), boundaries (3), field (3), defense (3), after (3), axios (3), shadowfeed (3), weekly (3), ironworm (3), 36m (3), humanity (3), protocol (3), hack (3), microsoft (3), most (3), are (3), actually (3), crate (3), onering (3), malicious (3), exfiltration (3), mitigated (3), updated (3), version (3), maintainer (3), trap (3), jqwik (3), incident (3), reveals (3), trusting (3), part (3), miasma (3), worm (3), token (3), survived (3), hijacked (3), posts (3), reaction (3), toni (3), antunovic (3), opensource (3), stanley (3), ionut (3), cristian (3), florescu (3), honlly (3), dwayne (3), mcdaniel (3), sourcing (3), david (3), aronchick (3), sergey (3), boyarchuk (3), qanzhi111 (3), inference (3), homelab (3), containers (3), nerav (3), doshi (3), menu (3), account (2), log (2), use (2), database (2), algolia (2), diamond (2), sponsors (2), packages (2), four (2), mcp (2), two (2), audit (2), slsa (2), actions (2), docker (2), history (2), ability (2), sort (2), top (2), latest (2), relevant (2), sign (2), new (2), front (2), door (2), may (2), taught (2), third (2), party (2), azure (2), matters (2), trivy (2), march (2), shows (2), secret (2), exposure (2), hurts (2), electronics (2), industry (2), importers (2), need (2), know (2), leopard (2), head (2), organizations (2), 組織向け (2), セキュリティ (2), ハードニング完全ガイド (2), exact (2), controls (2), setup (2), llmsecurity (2), build (2), secure (2), local (2), best (2), practices (2), beyond (2), basic (2), hashing (2), they (2), matter (2), place, coders, share, stay, date, grow, careers, made, love, 2016, ruby, rails, powers, other, inclusive, communities, open, source, forem, terms, privacy, policy, conduct, mlh, shop, free, postgres, contact, showcase, accounts, advertise, help, education, tracks, videos, challenges, home, space, discuss, keep, development, manage, career, neon, google, model, platform, thank, you, our, supporting, mat, sense, merging, gemini, math, smart, retail, inventory, chainscope, reading, attacks, across, surfaces, one, slide, time, carry, lethal, trifecta, last, week, showed, claude, plugin, blocks, before, installation, ways, shifted, weeks, monitoring, checklist, teams, stop, too, early, provenance, hands, generate, verify, verifier, anatomy, targeting, mini, shai, hulud, gusano, cadena, suministro, que, explotó, tanstack, ecosistema, unmaintained, sca, tools, can, see, bridging, gap, converting, spdx, bitwarden, cli, tool, forces, did, abandon, tuf, turbulent, container, signing, bumblebee, osv, scanner, takes, scanning, fire, architecture, product, forcing, user, replaceable, phone, batteries, there, loophole, apple, already, using, trending, guides, resources, devops, agentic, cybersecurity, manufacturing, oem, cicd, gitguardian, chinasourcing, electronicsmanufacturing, chinaelectronicsindustry, malware, blockchain, web3, gguf, localai, podman, right, left, post, hide, close, powered, navigation, skip, content,

Text of the page (random words):
supplychain dev community skip to content navigation menu search powered by algolia search log in create account dev community close supplychain follow hide create post posts left menu sign in for the ability to sort posts by relevant latest or top right menu from supply chain to software what containers actually are and why they matter nerav doshi nerav doshi nerav doshi follow jun 15 from supply chain to software what containers actually are and why they matter containers docker podman supplychain comments add comment 6 min read local llm security best practices beyond basic hashing jay grider jay grider jay grider follow jun 13 local llm security best practices beyond basic hashing llmsecurity localai supplychain gguf comments add comment 4 min read how to build a secure homelab for llm inference jay grider jay grider jay grider follow jun 12 how to build a secure homelab for llm inference homelab llmsecurity inference supplychain comments add comment 4 min read github organization security hardening exact controls and step by step setup guide mike anderson mike anderson mike anderson follow jun 11 github organization security hardening exact controls and step by step setup guide github security devsecops supplychain 1 reaction comments add comment 29 min read shadowfeed weekly 1 ironworm npm attack 36m humanity protocol hack microsoft repos compromised qanzhi111 qanzhi111 qanzhi111 follow jun 11 shadowfeed weekly 1 ironworm npm attack 36m humanity protocol hack microsoft repos compromised web3 security supplychain blockchain comments add comment 3 min read rust crate onering compromised malicious code exfiltration risk mitigated with updated version sergey boyarchuk sergey boyarchuk sergey boyarchuk follow jun 10 rust crate onering compromised malicious code exfiltration risk mitigated with updated version rust security supplychain malware comments add comment 6 min read 組織向け github セキュリティ ハードニング完全ガイド mike anderson mike anderson mike anderson follow jun 10 組織向け github セキュリティ ハードニング完全ガイド github security devsecops supplychain comments add comment 29 min read end to end github security hardening guide for organizations mike anderson mike anderson mike anderson follow jun 10 end to end github security hardening guide for organizations github security devsecops supplychain comments add comment 44 min read the leopard s head david aronchick david aronchick david aronchick follow jun 9 the leopard s head opensource security supplychain history comments add comment 6 min read china electronics industry 2026 what importers need to know china sourcing agents china sourcing agents china sourcing agents follow jun 9 china electronics industry 2026 what importers need to know chinaelectronicsindustry electronicsmanufacturing supplychain chinasourcing comments add comment 11 min read trivy s march supply chain attack shows where secret exposure hurts most dwayne mcdaniel dwayne mcdaniel dwayne mcdaniel follow for gitguardian jun 8 trivy s march supply chain attack shows where secret exposure hurts most security supplychain devsecops cicd 1 reaction comments 1 comment 5 min read your cpe manufacturer is not building your router their sub contractor is here is why that matters honlly telecom honlly telecom honlly telecom follow jun 5 your cpe manufacturer is not building your router their sub contractor is here is why that matters oem telecom manufacturing supplychain comments add comment 4 min read the bot that never was part 2 miasma worm how a github token survived and hijacked my repos from an azure ip ionut cristian florescu ionut cristian florescu ionut cristian florescu follow jun 8 the bot that never was part 2 miasma worm how a github token survived and hijacked my repos from an azure ip security opensource github supplychain comments 2 comments 10 min read supply chain is the new front door what may 2026 taught us about third party risk stanley a stanley a stanley a follow jun 3 supply chain is the new front door what may 2026 taught us about third party risk cybersecurity opensource supplychain devsecops comments add comment 7 min read the maintainer trap what the jqwik incident reveals about trusting your dependencies toni antunovic toni antunovic toni antunovic follow jun 7 the maintainer trap what the jqwik incident reveals about trusting your dependencies security supplychain agentic devops 1 reaction comments add comment 6 min read sign in for the ability to sort posts by relevant latest or top trending guides resources the bot that never was part 2 miasma worm how a github token survived and hijacked my repos f the bot that never was the eu is forcing user replaceable phone batteries there s a loophole apple is already using the maintainer trap what the jqwik incident reveals about trusting your dependencies npm is on fire why the architecture is the product bumblebee vs osv scanner two takes on supply chain scanning twelve trust boundaries a field guide to supply chain defense after axios 1 14 1 rust crate onering compromised malicious code exfiltration risk mitigated with updated version why did docker abandon tuf a turbulent history of container signing bitwarden cli compromised what a supply chain attack on a tool i actually use forces me to audit bridging the gap converting spdx 3 0 to 2 3 in the software supply chain twelve trust boundaries a field guide to supply chain defense after axios 1 14 1 your dependencies are 48 unmaintained and sca tools can t see it mini shai hulud un gusano de cadena de suministro que explotó tanstack y el ecosistema npm anatomy of a github actions supply chain attack targeting mcp repos slsa provenance hands on generate with github actions verify with slsa verifier npm supply chain audit the checklist most teams stop too early four mcp packages four ways the supply chain shifted in two weeks of npm monitoring i built a claude code plugin that blocks compromised packages before installation 98 of agents carry the lethal trifecta last week showed why i built chainscope reading supply chain attacks across 6 surfaces one slide at a time shadowfeed weekly 1 ironworm npm attack 36m humanity protocol hack microsoft repos compromised supply chain sense merging gemini ai and math for smart retail inventory twelve trust boundaries a field guide to supply chain defense after axios 1 14 1 your cpe manufacturer is not building your router their sub contractor is here is why that mat dev diamond sponsors thank you to our diamond sponsors for supporting the dev community google ai is the official ai model and platform partner of dev neon is the official database partner of dev algolia is the official search partner of dev dev community a space to discuss and keep up software development and manage your software career home dev challenges dev videos dev education tracks dev help advertise on dev organization accounts dev showcase about contact free postgres database dev shop mlh code of conduct privacy policy terms of use built on forem the open source software that powers dev and other inclusive communities made with love and ruby on rails dev community 2016 2026 we re a place where coders share stay up to date and grow their careers log in create account