Lily Tool Blocks Open-Source Backdoors

Researchers present Lily, an automated tool to detect and block code-level backdoors in open-source software. It integrates into CI pipelines to stop malicious commits and vet releases to prevent tampered packages from entering ecosystems like Linux.