A vulnerability in Cisco's video codec OpenH264 allows attackers to smuggle in malicious code. Firefox is also at risk.
Security researchers at Apiiro have released two free, open-source tools designed to detect and block malicious code before they are added to software projects to curb supply chain attacks.