Supply Chain on Omid Farhanghttps://omid.dev/tags/supply-chain/Recent content in Supply Chain on Omid FarhangOmid Farhanghttps://omid.dev/images/bio-photo-150x150.jpghttps://omid.dev/images/bio-photo-150x150.jpgHugo -- 0.165.0en-US2026 Omid Farhang | All rights reserved.Sat, 15 Aug 2026 23:50:00 +0330The Frontend Is a Privileged System Nowhttps://omid.dev/2026/08/15/the-frontend-is-a-privileged-system-now/Sat, 15 Aug 2026 23:50:00 +0330https://omid.dev/2026/08/15/the-frontend-is-a-privileged-system-now/The browser is untrusted, but the system that builds and delivers the frontend is not. Install hooks, CI identities, and release credentials make frontend delivery a production trust boundary.The AUR Is Frozen: Inside Arch's Third Supply-Chain Attack Wavehttps://omid.dev/2026/08/10/aur-freeze-supply-chain-attack/Mon, 10 Aug 2026 12:00:00 +0330https://omid.dev/2026/08/10/aur-freeze-supply-chain-attack/Arch Linux froze all AUR writes after a third supply-chain attack wave, then restored pushes and adoption on August 11 with review gates. Timeline, how Atomic Arch worked, and what to do on Manjaro and other Arch-derived distros.