François Proulx - Arbitrary Code Execution 0-day in Build Pipeline of Popular Open Source Packages

af The Application Security Podcast