Microsoft pulls GitHub repos amid Miasma supply-chain hack

🔗 https://cybersecurefox.com/en/microsoft-github-miasma-software-supply-chain-attack

#Microsoft #GitHub #Miasma #software #supply #chain #PyPI #malware

VS Code Adds 2-Hour Delay for Automatic Extension Updates

🔗 https://cybersecurefox.com/en/vscode-two-hour-extension-update-delay

#vs #code #extension #update #delay #minimum #package #age #software #supply #chain #security #npm #min-release-age #vscode #1.123

https://blog.gslin.org/archives/2026/06/13/13067/npm-v12-%e8%a6%81%e9%a0%90%e8%a8%ad%e9%97%9c%e6%8e%89-post-install-script-%e4%ba%86/

npm v12 要預設關掉 post install script 了

#attack #chain #ecosystem #install #javascript #js #manager #npm #package #post #script #security #supply

TIL that production chains can be complex

This is my new facial cream. It’s expensive as hell, but it works as advertised, at least for me. I bragged about it to a friend and they asked, “where is it from?” My brain works in mysterious ways and I couldn’t simply give them the name of the brand. Maybe I should get tested for autism? 🩵 Anyway…

The cream appeares to be made in Poland by a Polish manufacturer: https://retixc.com/en/about-us/

This Polish manufacturer is a subsidiary of a French company called Urgo*: https://urgo-group.fr/en/brands/retix-c/

I had never really given any thought to production chains before looking up this facial cream. I guess this left me with mixed feelings, because why can’t simply company A make product B? This feeling may be childishly simplistic, but then again, I know ZERO about economics and such… Please do enlighten me. 😅 What are the implications of Retix.C in Poland being owned by Urgo in France? What would be different for customers, employees and the environment if this weren’t a subsidiary relationship?

*any Stargate fans here?

Miasma Worm Hits Microsoft GitHub Supply Chain Repos

🔗 https://cybersecurefox.com/en/miasma-worm-microsoft-github-supply-chain-attack

#miasma #worm #supply #chain #attack #microsoft #github #repositories #azure #functions #durabletask #pypi