English (United Kingdom)

https://curated-unify.zendy.io/wp-json/zendy-region/v1/featured_content/oa?rat=en

https://curated-unify.zendy.io/wp-json/zendy-region/v1/highlighted_journal/

Global: Zendy Plus annual

Presents the access of premium content as premium feature

Premium Content

Presents the keyphrase highlighting as premium feature

Keyphrase Highlighting

Presents the summarisation as premium feature

Summarisation

Insights

Presents the pdf analysis as premium feature

PDF Analysis

Presents the zaia usage as premium feature

ZAIA

Global: Zendy Plus monthly

Global: Zendy Tools annual

Global: Zendy Tools monthly

Global: Zendy Free Plan

A software supply chain attack is characterized by the injection of maliciouscode into a software package in order to compromise dependent systems furtherdown the chain. Recent years saw a number of supply chain attacks that leveragethe increasing use of open source during software development, which isfacilitated by dependency managers that automatically resolve, download andinstall hundreds of open source packages throughout the software life cycle.This paper presents a dataset of 174 malicious software packages that were usedin real-world attacks on open source software supply chains, and which weredistributed via the popular package repositories npm, PyPI, and RubyGems. Thosepackages, dating from November 2015 to November 2019, were manually collectedand analyzed. The paper also presents two general attack trees to provide astructured overview about techniques to inject malicious code into thedependency tree of downstream users, and to execute such code at differenttimes and under different conditions. This work is meant to facilitate thefuture development of preventive and detective safeguards by open source andresearch communities.

Backstabber's Knife Collection: A Review of Open Source Software Supply Chain Attacks