npm

Supply Chain Attacks in Open Source: The Growing Threat to Software Security

From the XZ Utils backdoor to typosquatting on npm, supply chain attacks are the fastest-growing threat vector in software. How they work and how to defend against them.