arstechnica.com › security › 2026 › … Widely used Daemon Tools disk app backdoored in monthlong supply-chain attack … More recent supply-chain attacks have hit Trivy, Checkmarx, and Bitwarden and more than 150 packages available through open source repositories. … May 5, 2026 · Dan Goodin