Foreign adversaries are trying to weaponize open-source software, report finds

Nation-state actors from China and Russia are actively attempting to compromise open-source software ecosystems by embedding malicious code and backdoors through trusted contributor roles.