Sources & Methods Newsletter #20 - November 2024

📁 Sources OSSF Malicious Package Registry - the Securing Critical Projects Working Group of the Open Source Security Foundation (OpenSSF) maintains a collection of reports of malicious packages identified in open source repositories in Open Source Vulnerability (OSV) format. 📰 Information Sophos - Pacific Rim: Inside the Counter-Offensive&