Poisoned Pipeline / Incidents / AS148
npm/PyPI typosquats of secure payment apps
Socket: coordinated npm and PyPI campaign typosquatting popular
secure payment apps.
Mapped techniques
supply-chain campaign
Payment-app names on two registries.
Coordinated campaign.