This mindset has been spreading for… probably decades. Nowadays, it is even encouraged by certain popular programming languages, by including toolchains that make it as easy as possible to pull in third-party dependencies while shipping standard libraries so minimal that a developer is strongly encouraged to rely on them.
This inevitably leads to a world where software supply chain attacks have massive reach and high chances of success. And threat actors take advantage of it, of course.
And it’s not just web development.
This mindset has been spreading for… probably decades. Nowadays, it is even encouraged by certain popular programming languages, by including toolchains that make it as easy as possible to pull in third-party dependencies while shipping standard libraries so minimal that a developer is strongly encouraged to rely on them.
This inevitably leads to a world where software supply chain attacks have massive reach and high chances of success. And threat actors take advantage of it, of course.