Software Supply Chain on JAVAPRO International

curl | bash | hacked: the unseen dangers in your dev lifecycle

Wed, 25 Mar 2026 07:00:02 +0000

There’s a line of shell that looks harmless, even helpful:

CODE

curl <XXX> | bash

It promises speed. Convenience. “Just install the thing and get on with your day.”

That promise is exactly why attackers love it.

That one-liner doesn’t merely install a tool. It hands execution control to whatever sits on the other end of a network request, runs with your permissions on your machine, and within your environment. There is no sandbox. No review step. No guardrails.

The Myth of Stability: Java's Software Supply Chain After Log4Shell

Thu, 08 Jan 2026 07:00:02 +0000

For as long as most Java developers can remember, we’ve lived inside a comforting story about our ecosystem. It’s the idea that Maven Central, the Jakarta stack, the Spring universe, the vast Apache landscape, and all the independent libraries quietly carrying enterprise workloads together form a coherent, self-maintaining, self-healing whole.

A world where problems are fixed upstream, where maintainers have time, where the dependencies we pull down are being actively watched by someone who knows exactly what they’re doing. It’s a lovely idea. It’s also never been completely real.

Move Fast, Break Laws: AI, Open Source and Devs (Part 4)

Thu, 10 Apr 2025 07:00:02 +0000

The software development landscape is rapidly changing, with legislation emerging as a key driver of industry trends. As our reliance on software and AI grows, so does our vulnerability to cybercrime, which is now a multi-trillion-dollar problem. This has caught the attention of regulators worldwide.

This article explains the various regulatory efforts in play and summarises actions that developers and executives should consider as they get to grips with 2025 - the year of software legislation

Move Fast, Break Laws: AI, Open Source and Devs (Part 3)

Tue, 08 Apr 2025 07:00:01 +0000

Background

Part 1 covered the background, what a software supply chain is and thoughts on AI and open source.

Part 2 explored how governments are working to create legislation and what the current status is.

Move Fast, Break Laws: AI, Open Source and Devs (Part 2)

Thu, 03 Apr 2025 09:56:07 +0000

This article explains the various regulatory efforts in play and summarises actions that developers and executives should consider as they get to grips with 2025 - the year of software legislation

Move Fast, Break Laws: AI, Open Source and Devs (Part 1)

Tue, 01 Apr 2025 11:34:21 +0000

This article series explains the various regulatory efforts in play and summarises actions that developers and executives should consider as they prepare for 2025, the year of software legislation.