Two different attackers poisoned popular open source tools - and showed us the future of supply chain compromise

Time to start dropping SBOMs

FEATURE Two supply chain attacks in March infected open source tools with malware and used this access to steal secrets from tens of thousands - if not more - organizations. We won't know the full blast radius for months....