CrowdStrike’s Head of Counter Adversary Operations @Adam_Cyber says supply chain attacks have shifted from compromising code to targeting developers directly: "They go after your credentials, phish you, get access to your logins to things like npm and PyPI, and then abuse that." "There are a number of ways they can do this with git tags where they can hide malicious code and redirect Git to a tag." "Axios was downloaded something like 100,000 times per week. That gives you a sense of how…