Tag: supply-chain-attacks

Popular open source JavaScript package becomes the door to a supply chain attack potentially impacting millions of websites. Should we blindly trust open source?

A history of software supply chain attacks, risk factors and mitigation strategies