A so called software supply chain attack , in which hackers corrupt a legitimate piece of software to hide their own malicious code, was once a relatively rare event but one that haunted the cybersecurity world with its insidious threat of turning any innocent application into a dangerous foothold in a victims network. Now one group of cybercriminals has turned that occasional nightmare into a near weekly episode, corrupting hundreds of open source tools, extorting victims for profit, and sowing...
