|a Futurum companyCoverage
Cloud NativeCI/CDDevSecOpsPlatform EngineeringDataOpsContinuous TestingLow-Code / No-CodeIT as CodeEnterprise DevOpsMedia
Techstrong TV LiveVideo InterviewsTech Field DayTechstrong GangAgents of DevSecurity BoulevardCloud Native NowDigital CxO
Contributing Writer
Nigel Douglas is Head of Developer Relations at Cloudsmith, the cloud-native artifact management platform trusted by Fortune 500 and Global 2000 engineering teams to secure and distribute software at scale. Nigel works at the intersection of developer experience and supply chain security, working closely with engineering and security teams to help them understand how modern software supply chains are evolving, and what it takes to keep them secure.
A developer pulls a package from a reliable repo. It is signed, has provenance, and has been scanned. And then…it contains malware. That is no longer hypothetical. When the Miasma worm tore through the @redhat-cloud-services npm namespace in June, its malicious releases carried real SLSA provenance, because they were built in Red Hat’s own GitHub […]
Jul 22, 2026 · 3 min