The rate of software supply chain attacks has a funny way of keeping pace with the rate at which software is eating the world. From 2019 to 2022, the average yearly rise in attacks exceeded 700%.
Earlier this year, we even saw the first official case of a daisy chain-like effect of one software supply chain attack directly leading to another. Threat actors are using more sophisticated ways of abusing open source ecosystems like GitHub to host seemingly benign files – the names and formats of which raise no obvious red flags and are initially cleared by most antivirus products.
