1.Catching malicious package releases using a transparency logblog | 2025-12-12 12:00 | blog.trailofbits.com | Original ↗ | .md | #supply-chain | #threat-detection | #sigstore