Developer account body snatchers pose risks to the software supply chain

• Over the past several years, high-profile software supply chain attacks have increased in frequency. These attacks can be difficult to detect and source code repositories became a key focus of this research.
• Developer account takeovers present a substantial risk to the software supply chain because attackers who successfully compromise a developer account could conceal malicious code in software packages used by others.
• Talos analyzed several of the major software repositories to assess the level of developer …

account developer on the radar risks software software supply chain supply supply chain