Supply chain

Poisoned packages, hijacked releases and how to defend a build.