Extuno Blog - Supply Chain Security Research https://extuno.com/blog Research and findings on browser extension and developer package supply-chain security. en Installing a package is running it https://extuno.com/installing-a-package-is-running-it https://extuno.com/installing-a-package-is-running-it 2026-08-04 Finding leaked secrets in CI before they ship https://extuno.com/finding-leaked-secrets-in-ci https://extuno.com/finding-leaked-secrets-in-ci 2026-07-04 What browser extension permissions actually expose https://extuno.com/browser-extension-permissions-explained https://extuno.com/browser-extension-permissions-explained 2026-07-02 npm typosquatting and dependency confusion, explained https://extuno.com/npm-typosquatting-and-dependency-confusion https://extuno.com/npm-typosquatting-and-dependency-confusion 2026-06-30 How an extension turns malicious after an update https://extuno.com/how-extensions-turn-malicious-after-update https://extuno.com/how-extensions-turn-malicious-after-update 2026-06-28