Discussions
- Back to main menu
- BROWSE BY TOPICBROWSE BY TOPIC
- Global IT Asset Management
- IT Security
- Compliance
- Cloud & Container Security
- Web App Security
- Certificate Security & SSL Labs
- Developer API
- Cloud Platform
- Start a discussion
Blog
Training
Docs
Support
Webinars
Trust

All posts in Supply Chain

1 Post

September 11, 2025 - 4 min read

When Dependencies Turn Dangerous: Responding to the NPM Supply Chain Attack

Posted in Vulnerabilities and Threat Research

9

Categories

Qualys Insights
- QSC
Product and Tech
- Patch Management
- VMDR
Vulnerabilities and Threat Research
- Patch Tuesday
- Threat Thursday

Top Posts

CVE-2021-3156: Heap-Based Buffer Overflow in Sudo (Baron Samedit)
Apache Log4j Zero Day Threat: CVE-2021-44228 Detection and Response
Remote Unauthenticated Code Execution Vulnerability in OpenSSH Server (regreSSHion)
PwnKit: Local Privilege Escalation Vulnerability Discovered in polkit's pkexec (CVE-2021-4034)
CAA Mandated by CA/Browser Forum

Get Updates!

Join the discussion today!

Learn more about Qualys and industry best practices.

Share what you know and build a reputation.

Secure your systems and improve security for everyone.

Start a discussion

Qualys

Qualys.com
Qualys Community Edition
Qualys Merchandise Store

Qualys Communities

Vulnerability Management
Policy Compliance
PCI Compliance
Web App Scanning
Web App Firewall
Continuous Monitoring
Security Assessment Questionnaire
Threat Protection
Asset Inventory
AssetView
CMDB Sync
Endpoint Detection & Response
Security Configuration Assessment
File Integrity Monitoring
Cloud Inventory
Certificate Inventory
Container Security
Cloud Security Assessment
Certificate Assessment
Out-of-band Configuration Assessment
Patch Management
Developer API
Cloud Agent
Dashboards & Reporting

Discussions

All discussions
Global IT Asset Management
IT Security
Compliance
Cloud & Container Security
Web App Security
Certificate Security & SSL Labs
Developer API

Blog

All posts
Qualys Insights
Product and Tech
Vulnerabilities and Threat Research
Release Notifications

Training

Overview
Certified Courses
Video Library
Instructor-led Training

Docs

Overview
Release Notes

Support

Support Portal

© 2025 Qualys, Inc. All rights reserved. Privacy Policy . Accessibility