July 30, 2026· ~6 min readDisrupting Supply Chain Attacks on npm and GitHub Actions: The 2026 Defensive Layer > **Teaser:** GitHub has shipped a wave of supply chain hardening across npm and GitHub Actions in 2026 — new malware detection, action pinning enfor
June 10, 2026· ~6 min readDependency Graph Security: How the Miasma Worm Exploits Supply Chain Trust Graphs The Miasma worm compromised 73 Microsoft GitHub repositories across the Azure, Azure-Samples, Microsoft, and MicrosoftDocs organisations — and its fu