Malicious injections into open source and third-party software components are increasing. To stay protected from this evolving threat, a new approach to combatting malware within the software supply chain must be adopted. This session will discuss specific malware attack scenarios currently targeting software, and outline key strategies to protect, detect, and respond to these attacks.