In the supply chain ecosystem there are many vulnerable platforms that are trusted by the majority of developers. These platforms can be exploited in a number of ways by attackers. In this session we will elaborate on the many attack vectors including integrated development environment (IDE), source code management (SCM), package managers and CI/CD.