Fortanix and Sectigo partner to automate software supply chain security

Most downloaded among the malicious packages was “blockscan-api,” which is a backdoored copy of etherscan-api, followed by “passport-js,” which is a backdoored passport copy, and the backdoored bcryptjs copy dubbed “bcrypts-js,” an analysis from the Datadog Security Research team showed.