Experts have uncovered 88,000 malicious open source packages so far this year, a triple-digit increase on the same figure in 2019 and indicative of a fast-growing corporate attack surface. The figures come from Sonatype’s eighth annual State of the Software Supply Chain report, which was compiled from public and proprietary data analysis, including 131 billion Maven Central downloads and thousands of open source projects.

Read full article on Infosecurity