Google Launches OSS Rebuild to Expose Malicious Code in Widely Used Open-Source Packages
Google’s OSS Rebuild checks package builds to stop supply chain attacks in Python, npm, and Rust.
More info