Supply chain security is evolving at a terrifying pace. In this episode of The Security Disclosure, Roeland Delrue (COO and co-founder of Aikido Security) breaks down why attackers have shifted their crosshairs from cloud infrastructure directly onto the individual developer's machine.We dive deep into how malicious JavaScript packages, VS Code extensions, and Chrome extensions manage to slip past traditional endpoint software like CrowdStrike or McAfee, and discuss the practical, counterintuitive steps security teams can take right now to protect themselves. Roeland also shares a surprisingly candid take on why open-source marketplaces like NPM and PyPI need to step up, why giving threat actors "oxygen" on social media does more harm than good, and plays a brutal round of tech "Would You Rather."