A dataset and analysis of publicly reported software supply chain attacks.
The dataset can be found here.