How Shady Code Commits Compromise the Security of the Open-Source Ecosystem

This type of activity attracted significant attention after the maintainer of an important Node.js supply chain component, node-ipc, altered its code to have destructive behavior.