A Retrospective Survey of 2024/2025 Open Source Supply Chain Compromises

· Filippo Valsorda · Oct. 10, 2025, 4 p.m.
Open Source software development GitHub Actions Phishing
Summary
The blog post discusses common root causes of open source supply chain compromises that can be mitigated, specifically focusing on phishing, control handoff, and unsafe GitHub Actions triggers.
Read full post on words.filippo.io →
AUTHOR
Advertise
Sponsor diff.blog
Put your product in front of developers who read and write about their craft. One exclusive sponsor at a time.
Become a sponsor →
BLOG POST FEATURED ON

Placeholder image
Hacker News

13 points

Placeholder image
r/CryptoAnarchy

1 points

Add this plugin to your blog