The Software Supply Chain Malware Landscape: January - May 2026

We surfaced three trends about malware: npm and PyPI growing at similar rates, ATOs aren’t the only risk, and threat actors targeted non-developers.