Developer Workstations Are Now Part of the Software Supply Chain

3 campaigns hit npm, PyPI, and Docker Hub in 48 hours, exposing secrets from developer and CI/CD environments.

Raccontata dathehackernews.com