JFrog

Attackers breached OpenInfra Europe's JFrog Artifactory instance, the repository used to store and distribute software packages. Because such repositories serve code directly to developers, any packages stored there could have been tampered with, raising the risk of supply chain attacks. The incident is drawing attention as organisations assess whether they downloaded affected artifacts.