via:
Supply chain attacks are exploiting our assumptions - The Trail of Bits Blog
Supply chain attacks exploit fundamental trust assumptions in modern software development, from typosquatting to compromised build pipelines, while new defensive tools are emerging to make these trust relationships explicit and verifiable.