Software supply chain attacks are exploiting a dangerous blind spot - the difference between the code developers review and the software that actually runs. At the Open Source Summit, Google’s Eve ...