Aikido guide on supply chain defenses drawing on axios, tj-actions, CanisterWorm, GlassWorm and postmark-mcp compromises
Aikido Security published a best-practices guide for defending against software supply chain attacks. It cites Aikido Intel data: about 7.5 million package versions analyzed in Q2 2026, with 19,500 malicious packages confirmed. The guide uses recent incidents to show which controls would have worked: the axios compromise, tj-actions/chang…