#open-source-security

Open Source

RiskReady: 254 AI Tools for GRC, Locked Behind Human Approval

Nine MCP servers. 254 compliance tools. Zero unsupervised AI writes. RiskReady's open-source GRC platform just hit GitHub, promising enterprise-grade risk management without SaaS lock-in.

Databases & Backend

Axios Maintainer Hacked: NPM's Latest Supply Chain Nightmare

Two axios versions went rogue on npm, slipping in a trojan that phones home to hackers. Your dev machine could be compromised—here's the acerbic truth behind the breach.

New Releases

30,000 npm Packages a Day: GitHub's Fight to Stop Supply Chain Poisoning

Every day, 30,000 packages hit npm—hundreds laced with malware. GitHub's cracking down on supply chain attacks starting in Actions workflows.