supply-chain threat watch
tripwire follows malware campaigns against open-source package registries: the accounts, packages and infrastructure behind them. When a known campaign grows, it raises an alert. A research project run by veryserious.systems.
closed access — tripwire isn't available for public use.