Two different attackers poisoned popular open source tools – and showed us the future of supply chain compromise

April 11, 2026 Steven