Security

Supply-chain defense, secret hygiene, and spam.

• Implementing Semgrep: custom rules and a Supply Chain scan

  Aug 21, 2026

  Security

  Supply Chain, CI/CD

• Implementing Aikido: malware detection & Safe Chain install-time blocking

  Aug 15, 2026

  Security

  Supply Chain, npm Security

• Auditing my own site for the npm worm, then planning the defense

  Aug 11, 2026

  Security

  Supply Chain, npm Security

• Anatomy of the Shai-Hulud npm Supply-Chain Attack

  Aug 11, 2026

  Security

  Supply Chain, npm Security