THE STATE OF SOFTWARE SUPPLY CHAIN SECURITY 2024

Summary from the TLDR InfoSec newsletter

ReversingLabs tracks the landscape of software supply chain security and reports on trends that it has observed. Some key trends in 2023 were the proliferation of protestware, more malicious packages being hosted on repositories, and PyPi overtaking npm for the most malicious packages.