Greenflagged blog
Supply-chain security notes from the Greenflagged registry
Notes from the front line of npm supply-chain security — what we catch, how the pipeline works, and the interesting things hiding in the registry.
Latest
Herdr app mod
Greenflagged Herdr app mod shows dependency status of your project.
Tell your agents to chill
Agents adding false urgency to tasks was giving me a nonstop adrenaline rush. Asking the agent to calm down worked on me as well.
Agents fail like engineers, so I review them like engineers
The Skeptic validates claims, the Logician makes sure the logic is sound, and the Steward thinks long-term. These 3 agents took my workflow to the next level.
@sudobility cryptominer
A cryptominer hit four @sudobility packages.
keyv / cacheable worm
Keyv / cacheable compromise infected thousands of packages
AsyncAPI Miasma RAT via CI/CD compromise
How greenflagged detected the Miasma RAT in @asyncapi