Topic
SUPPLY-CHAIN
All blog posts, tools, and guides about supply-chain from Developers Digest.
3 resources - 3 posts
Blog Posts
View in blog →
Perplexity Bumblebee: Developer Guide to the Open Source Supply Chain Scanner
Bumblebee is Perplexity's open source scanner for detecting compromised packages, extensions, and MCP configs on developer machines. A read-only Go binary that checks npm, PyPI, Go modules, and 10+ ecosystems against exposure catalogs - without running any install scripts. Here is how to set it up and use it.
7 min read
Mastra npm Supply Chain Attack: 140+ AI Framework Packages Backdoored
On June 17, 2026, attackers hijacked a dormant Mastra contributor account and pushed malicious versions of 140+ packages. The payload steals crypto wallets, browser data, and cloud credentials. Here is what happened, how to check your lockfile, and what to do if you installed an affected version.
7 min read
TanStack's npm Compromise Is the CI Lesson Agent Teams Needed
The TanStack npm incident was not just a package-security story. It was a reminder that AI agent workflows inherit every weak trust boundary in CI.
9 min read
Keep exploring
More on supply-chain
- - Compare Tools - dive deeper across the Developers Digest knowledge base
- - All supply-chain articles in the blog archive
- - Developers Digest on YouTube - video tutorials covering supply-chain and more
Get Smarter About AI Dev
New tutorials, open-source projects, and deep dives on coding agents - delivered weekly.
One email per weekReal code, not theoryFree forever
Explore 688 topics
Browse All Topics