A Retrospective Survey of 2024/2025 Open Source Supply Chain Compromises

129 · Filippo Valsorda · Oct. 10, 2025, 4 p.m.
Open Source supply chain security Phishing GitHub Actions
Summary
The blog post discusses common root causes of open source supply chain compromises that can be mitigated, specifically focusing on phishing, control handoff, and unsafe GitHub Actions triggers.
Read full post on words.filippo.io →
AUTHOR
BLOG POST FEATURED ON

Placeholder image
Hacker News

13 points

Placeholder image
r/CryptoAnarchy

1 points

Add this plugin to your blog