Developer Workstations Are Now Part of the Software Supply Chain

Recent attacks, including those mimicking the "mini Shai Hulud" and "Shai-Hulud 2.0" campaigns, have highlighted a growing threat: attackers targeting developer workstations to steal credentials and secrets from CI/CD pipelines and developer environments. This shift represents a significant expansion of the software supply chain attack surface, as attackers leverage the context and access provided by developer tools to compromise production systems. The focus is now on securing these developer workstations to prevent credential harvesting and subsequent supply chain manipulation.