Software Composition Analysis: Fix Open-Source Risks
Software Composition Analysis: Fix Open-Source Risks Learn how software composition...
Sep 23, 20261 min read0 reactions0 comments
Back to articles Sep 23, 2026 
May 5, 2026
May 5, 2026
May 5, 2026
Tag archive
#dependencyscanning
H
Jul 13, 2026HalluSquatting: the dependency your agent invented, and the attacker who registered it first
Researchers from Tel Aviv University, the Technion, and Intuit describe a supply-chain pattern, HalluSquatting, that turns an AI coding agent's tendency to hallucinate package and repository names into a delivery channel for remote code execution and botnet payloads. The novelty is in the delivery, not the malware.
Jul 13, 20263 min read0 reactions0 comments
PHP Composer Security — How to Find and Fix Vulnerable Dependencies in Your PHP Application
PHP composer security is a serious part of modern PHP application security because most PHP projects...
May 5, 20268 min read0 reactions0 comments
How to Meet SOC2 Open Source Dependency Requirements — A Practical Guide for Engineering Teams
The awkward moment usually arrives during your first SOC2 readiness review. The auditor asks, “How do...
May 5, 20268 min read0 reactions0 comments
B
May 10, 2026Best Software Supply Chain Security Tools 2026: Snyk vs Socket vs Chainguard vs Anchore vs Sigstore
Compare the best supply chain security tools including Snyk, Socket, Chainguard, Anchore (Syft/Grype), and Sigstore (Cosign). SBOM generation, vulnerability scanning, and artifact signing.
May 10, 20263 min read0 reactions0 comments
Python pip Security — How to Scan Your Dependencies for Vulnerabilities (requirements.txt, Pipfile, Poetry)
Python pip security is no longer just a packaging concern. Python applications now power APIs,...
May 5, 20269 min read1 reactions0 comments