DataBreachToday reports that Google expects large-scale open-source supply-chain compromises to keep growing after worm-like package attacks, maintainer account takeovers, and AI-enabled developer tooling expanded attacker reach across npm, GitHub, VS Code extensions, and downstream dependencies.
Google Warns Open-Source Attacks Will Reach New Heights
DataBreachToday reports that Google expects large-scale open-source supply-chain compromises to keep growing after worm-like package attacks, maintainer account takeovers, and AI-enabled developer tooling expanded attacker reach across npm, GitHub, VS Code extensions, and downstream dependencies.
Source: Databreachtoday