Q1 2024 Evolution of Software Supply Chain Security Report

Open source makes up a considerable part of modern-day software projects. CVEs abound for open-source libraries and software packages; however, according to Kenna Security, only 2-5% of these CVEs are ever exploited in the wild. By contrast, 82% of the malicious packages identified by Phylum never receive a CVE or

cve cves exploited in the wild libraries malicious malicious packages open source packages phylum projects report research security security report software software supply chain software supply chain security supply supply chain supply chain security