Developer Workstations Are Now Part of the Software Supply Chain

This article warns that modern supply-chain attacks increasingly target developer workstations and automation to harvest credentials (API keys, cloud credentials, SSH keys, tokens) rather than only injecting malicious code. It surveys recent campaigns that exfiltrated secrets from npm, PyPI and Docker Hub via poisoned packages, compromised tooling and malicious workflows, explains how automation and AI accelerate exploitation, and urges organizations to treat developer machines as a local supply-chain boundary with prevention, detection, and rapid rotation controls.