1. Catching malicious package releases using a transparency log blog | 2025-12-12 12:00 | blog.trailofbits.com | original ↗ | #supply-chain | #threat-detection | #sigstore