DeviceDoor: a public npm package shipping a Microsoft 365 device-code phishing and bulk-mail framework
OWASP Global AppSec EU 2026 Vienna: Key Takeaways on Secure Software Supply Chain, MCP Security, and the AI-BOM
Open-Source Security Is GitHub Safe? How to Know if a GitHub App or Repository Is Safe January 16, 2025