every supply chain has a weak link

Supply Chain Security Village

Supply Chain Security Village

A community hub for supply chain security, bringing together researchers, practitioners, developers, and defenders to share knowledge, showcase research, and advance the security of the ecosystem.

From the floor

The Village, in action

We run hands-on Supply Chain Security Villages at events like c0c0n — talks, live workshops, and a capture-the-flag. Here are a few moments from the floor.

Two days at the Supply Chain Security Village — c0c0n 2026.

How it started

Announcing the Village at c0c0n 2026.

On stage

Walking through the supply-chain workflow, live.

Around the Village

A look around the Village floor at c0c0n 2026.

On the main stage: how fast the npm supply chain moves, and why some risks still slip through.
Knowledge

Technical Talks

Expert-led sessions on the latest supply chain attack techniques, defense strategies, and standards like SLSA, Sigstore, and SBOMs.

Learn more
Hands-on

Live Demonstrations

Real-world supply chain attacks in controlled environments — dependency confusion, typosquatting, and pipeline compromise demonstrated live.

Learn more
Competition

CTF Challenges

Identify vulnerable dependencies, spot misconfigured CI/CD pipelines, and trace backdoored packages in capture-the-flag challenges.

Learn more

Get involved

Ready to Find the Weak Link?

Speak. Design challenges. Mentor newcomers. Volunteer. Or just show up and hack. The supply chain needs more people paying attention.

Get Involved