Expel Quarterly Threat Report Q3 2024, volume V: Preparing for software supply chain risk

This Q3 quarterly threat report examines emerging software supply-chain risks and related trends, highlighting attacks such as package revival hijacking and typosquatting of GitHub Actions, notes an increase in infostealer malware (e.g., Lumma), and recommends mitigations including maintaining SBOMs, using dependency-scanning tools, and pinning workflows to commit hashes to reduce supply-chain and workflow compromise risks.