Help Net Security: Software supply chain attacks are getting easier

ReversingLabs identified close to 11,200 unique malicious packages across three major open-source software platforms in 2023: npm, PyPI, and RubyGems.

Read more: https://www.helpnetsecurity.com/2024/01/24/software-supply-chain-abuse/