Open-source code repos open to supply chain attacks, researchers warn

As are closed source ones. More FUD for the sheeple.