This talk is for anyone who is using open source in their daily routine. The purpose is to bring awareness to the risks of software supply chain attackers lurking in some of our open source code and to show how ridiculously easy it is for them to launch attacks. Attendees will get better tools to detect when they are being tricked and what to do in order to stay alert.