05:44:00 +07:00 OpenJS: "XZ Utils Cyberattack Likely Not an Isolated Incident" - The team at socket currently catch around 100 similar supply chain attacks per month. It's a really tough problem because you have to be on the one hand welcoming to new legitimate contributers while at the same time block malicious entities, and the communities are already pretty unwelcoming in my experience. There's a general feeling that the open source infrastructure is a bit behind the times. At some point we need to realise it's a common good, much like "clean water, roads and bridges, and healthy capital markets". If you look around the world in most places there are major issues funding all of these things. # socket.dev