Open-source code repos open to supply chain attacks, researchers warnscworld.com4 pointsricecata year ago