A critical supply chain bug in a Google’s open-source software development tool called Bazel opened the door to hackers to insert malicious code. The command injection vulnerability, according to researchers, impacted the security of millions of Bazel-dependent projects including Kubernetes, Angular, Uber, LinkedIn, Databricks, DropBox, Nvidia and Google.

Source: SC Magazine