News

Two different attackers poisoned popular open source tools - and showed us the future of supply chain compromise

  • Jessica Lyons--Theregister.com
  • published date: 2026-04-11 11:11:09 UTC

Time to start dropping SBOMs FEATURE  Two supply chain attacks in March infected open source tools with malware and used this access to steal secrets from tens of thousands – if not more – organizations. We won't know the full blast radius for months.…

FEATURE Two supply chain attacks in March infected open source tools with malware and used this access to steal secrets from tens of thousands if not more organizations. We won't know the full blast … [+13514 chars]