Previous internet worms, you could patch to protect yourself; these new worms aren't stopped by patching, there's a fundamental change needed to your development lifecycle thats needed, and you should be working on it right_now. A great write up by StepSecurity to give a recap of the last few days this week. https://www.stepsecurity.io/blog/5-supply-chain-attacks-in-48-hours-why-securing-one-layer-is-not-enough