Researchers warn malicious packages can harvest secrets, weaponize CI systems, and spread across projects while carrying a dormant wipe mechanism.
Ransomware was the largest threat to U.S. critical infrastructure in 2024, with complaints rising 9% from 2023.