Researchers Scan for Supply-Side Threats in Open Source

A recent project to scan the main Python repository’s 268,000 packages found only a few potentially malicious programs, but work earlier this year uncovered hundreds of instances of malware.