Open Source
The cross-language serialization framework began life as Fury at Alipay, the world's largest payment platform.
“You now have this ongoing security incident and nobody of any particular clear authority being able to take control of it. That's a lot of chaos”
The malicious code creates a 'cascading compromise effect' into dependent ecosystems across npm's registry.
Protect yourself from malicious "phish" swimming upstream in OSS package consumption.
The External Secrets project gets community backing but says consistent support is still needed.
"Typically the support cases we have are saying ‘if you don’t help me, the whole system of this government will stop’"
"Users can define a series of modular steps—such as static file analysis, dynamic sandboxing, hash verification, unpacking, or signature detection"