2018 Has Been Open Season on Open Source Supply Chains

Via Tom Spring

Increasingly threat actors are planting bad code in open-source repositories in the hopes to harvest the flaws late.

Blog