Software Supply Chain Security Malicious PyPI, npm, and Ruby Packages Exposed in Ongoing Open-Source Supply Chain Attacks by Samantha Rowland June 4, 2025 by Samantha Rowland June 4, 2025 2 minutes read In the vast landscape of open-source software development, recent reports from Checkmarx have unveiled …