technology #BizIT #Security #OpenSource #Repositories #SupplyChainAttacks Supply-chain attacks on open source software are getting out of hand Ars Technica Jul 25 3m read