--- title: StepSecurity posts | daily.dev description: daily.dev is the easiest way to stay updated on the latest programming news. Get the best content from the top tech publications on any topic you want. canonical: https://daily.dev/sources/stepsecurity twitter:card: summary_large_image twitter:site: @dailydotdev og:url: https://daily.dev/sources/stepsecurity og:type: website og:site_name: daily.dev og:title: StepSecurity posts | daily.dev og:description: daily.dev is the easiest way to stay updated on the latest programming news. Get the best content from the top tech publications on any topic you want. og:image: https://api.daily.dev/og/sources/stepsecurity.png og:image:width: 1200 og:image:height: 630 ---  # StepSecurity Follow FollowBlock Related tags: [#cyber](/tags/cyber)[ #malware](/tags/malware)[ #npm](/tags/npm)[ #security](/tags/security)[ #github-actions](/tags/github-actions)[ #cicd](/tags/cicd) [Posts about cyber](/tags/cyber)[Posts about malware](/tags/malware)[Posts about npm](/tags/npm)[Posts about security](/tags/security)[Posts about github-actions](/tags/github-actions)[Posts about cicd](/tags/cicd) [Runtime Security for AWS CodeBuild-Hosted GitHub Actions Runners](/posts/runtime-security-for-aws-codebuild-hosted-github-actions-runners-xyn1dbk2c)[Introducing deny list egress policies for Harden-Runner](/posts/introducing-deny-list-egress-policies-for-harden-runner-xvzbaknun)[@7nohe/openapi-react-query-codegen Compromised Through an Exposed npm Publishing Workflow](/posts/7nohe-openapi-react-query-codegen-compromised-through-an-exposed-npm-publishing-workflow-bgbjtyydx)[Dev Machine Guard Now Inventories Where Developer Credentials Live](/posts/dev-machine-guard-now-inventories-where-developer-credentials-live-bmkycej01)[Dev Machine Guard Now Inventories Browser Extensions on Developer Machines](/posts/dev-machine-guard-now-inventories-browser-extensions-on-developer-machines-bhofakhsj)[The State of Open Source Supply Chain Attacks](/posts/the-state-of-open-source-supply-chain-attacks-6n0c8tjb5)[Rust Supply-Chain Attack: arrayref 0.3.10 and the proc-macro1 Typosquat Execute a Remote Payload at Build Time](/posts/rust-supply-chain-attack-arrayref-0-3-10-and-the-proc-macro1-typosquat-execute-a-remote-payload-at--8zkhailuk)[Team PCP Stole 78,330 Secrets From 2,186 Organizations. CloudSEK Just Published the List.](/posts/team-pcp-stole-78-330-secrets-from-2-186-organizations-cloudsek-just-published-the-list--lvaoow9cd)[Control Which Package Registries Your CI Jobs and Developer Machines Use](/posts/control-which-package-registries-your-ci-jobs-and-developer-machines-use-y0r7fyrhi)[ChainDrop npm Worm: Bun-loaded CI/CD credential harvester with Ethereum dead-drop C2](/posts/chaindrop-npm-worm-bun-loaded-ci-cd-credential-harvester-with-ethereum-dead-drop-c2-wso0hcbho) ## Most upvoted posts from StepSecurity ## Best discussed posts from StepSecurity ## All posts from StepSecurity ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/sources/stepsecurity#organization","name":"StepSecurity","url":"https://daily.dev/sources/stepsecurity","logo":{"@type":"ImageObject","url":"https://media.daily.dev/image/upload/s--vegWii-S--/f_auto,q_auto/v1774959924/logos/stepsecurity?_a=BAMAMiWQ0"}},{"@type":"CollectionPage","@id":"https://daily.dev/sources/stepsecurity#page","url":"https://daily.dev/sources/stepsecurity","name":"StepSecurity posts on daily.dev","about":{"@id":"https://daily.dev/sources/stepsecurity#organization"},"isPartOf":{"@type":"WebSite","url":"https://daily.dev"}},{"@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Sources","item":"https://daily.dev/sources"},{"@type":"ListItem","position":3,"name":"StepSecurity"}]}]} ```