An Introduction to Open Source Supply Chain Attacks

We have seen a surge in supply chain attacks that are targeting a different supply chain—the open source software supply chain. Instead of pursuing third-party vendors, their systems, and platforms, attackers are starting to shift their focus, taking direct aim at developers by targeting the developers’ best friend: open source software. This whitepaper is designed for those looking to learn more about the open source software risks they are likely being exposed to. Simply put, if you are not aware of the risks, then you will not be able to manage them effectively.