Abstract: The software supply chain has become a critical attack vector for adversaries aiming to infiltrate software development workflows by injecting malicious code into third-party packages and ...