Fetch exploit - Attacks against source code downloaders

Supply-chain attacks have come to the fore recently, with more and more companies moving towards DevOps. This talk demonstrates attacks against the software used to manage and download source code and how this affects the whole software supply-chain and DevOps pipeline.