We are about to see it happen with reasonably open software package repositories. Prepare yourself for a coming deluge of increasingly stealthy and sophisticate

We are about to see it happen with reasonably open software package repositories. Prepare yourself for a coming deluge of increasingly stealthy and sophisticated software supply chain attacks. It's not that most people are bad. It's that it doesn't take very many people behaving badly to ruin a common platform on the Internet since one bad actor can use cloud compute and bots and other resource pools to launch huge attacks. Add anonymity to the mix and you've got a recipe for easy high-impact low-risk abuse.