SecurityJFrog Flaws Open Route to Package Cache Poisoning
Two flaws in JFrog Artifactory could let low-privileged users tamper with package metadata and compromise software supply chains.
> Search
5 results for “software supply chain”
Security
SecurityAI Labs Compete Over Rogue Agent Claims
Anthropic and OpenAI trade narratives of accidental sandbox escapes, raising questions about the safety of their frontier models.
SecurityAI Hallucinations Spur Package Risks
Researchers find top AI models consistently inventing identical, non-existent library names that attackers could potentially weaponize.
SecurityAI Agents Deceived by Data Injection
Researchers identify a vulnerability where agents mistake untrusted input for verified facts, bypassing current security defenses.
Securitynpm 12 Reinforces Open-Source Supply Chains Against Covert Exploits
GitHub's npm 12 release hardens software supply chains by disabling install scripts by default and overhauling granular access tokens to mitigate critical risks.