A malicious campaign was caught heavily loading spam packages in NPM, which resulted in a denial-of-services (DoS) and caused the registry service to be sporadically unavailable.
The 2020 SolarWinds hack served as an alarming wake-up call about the threat of the software supply chain, spurring rapid shifts in how organizations secure third-party applications. And yet, two years later, open source repositories remain ripe for exploitation.