Software supply chain attacks: check your dependencies (opens in new tab)

Attackers are compromising open-source packages to spread malware. Cyber defenders are asked to review dependencies to reduce risks