Tagged with

2 articles found

The Fallibility of ‘Elite’ Open Source Stewardship: Lessons from Sudo’s 30-Year Maintenance Model

Todd C. Miller’s three-decade solo maintenance of sudo reveals the architectural fragility and hidden supply chain risks in our most critical infrastructure.

#software-maintenance#sudo#supply-chain-security

devops

The Sandworm Strikes Back: How Shai-Hulud Turned NPM into a Developer Nightmare

Over 1,000 packages compromised in a supply chain attack that exposed why our dependency ecosystem is fundamentally broken.

#devops#javascript#malware...