skip to content
astropod
sign in
news
Product news and updates from the Gastropod team.
tagged
provenance ×
PyPI and GitHub Are Racing Against Time for Package Poisoning
2026-07-29 03:15:57 · Chris
software-supply-chain-security
vulnerability-intelligence
pypi
+3
python
package-poisoning
provenance
What the OpenAI/Hugging Face Breach Says About SBOM Blind Spots
2026-07-23 03:58:10 · Chris
vulnerability-intelligence
software-supply-chain-security
sbom
+2
ai-security
provenance
Asyncapi NPM Supply Chain Attack
2026-07-16 22:24:44 · Chris
vulnerability-intelligence
software-supply-chain-security
npm
+2
github-actions
provenance
