The Weaponization of Open Source: How North Korean State Hackers Infiltrate the Global Software Supply Chain
EXECUTIVE SUMMARY The global software development ecosystem is facing an unprecedented and intensifying security crisis, driven largely by state-sponsored threat actors weaponizing the very foundations of modern programming: open source software (OSS) libraries. A landmark security report published by Amazon has officially linked a coordinated series of high-profile open source supply chain compromises to a…