Why Financial Services Is the Canary in the Code Mine
Brief
Organizations have long known that attackers publish malicious packages to public open source registries. The more consequential question is if those packages are actually reaching enterprise development environments.