Open Source

Installing a Package Runs Its Code. That Is the Design, Not the Attack.

CrowdStrike has started intercepting npm install and pip install at the endpoint, blocking a package before its embedded scripts can run. That the defence has moved to the last moment before execution is an admission about everything upstream of it.

By Alison Acosta 4 hours ago

A computer monitor having source code on the screen with dark mode editor and a warm yellow light in the background

Technology

Open Source Maintenance Becomes a Procurement Question

Companies have always known their software sits on components maintained by volunteers. Insurers, auditors and regulators are now asking which ones, who maintains them, and what happens when that person stops.

By Alison Acosta August 19, 2026

Open Source

Tagged stories

Installing a Package Runs Its Code. That Is the Design, Not the Attack.

Open Source Maintenance Becomes a Procurement Question