IntroductionSupply chain attacks on package registries have grown in volume and sophistication [1]...