Celebrity vulnerabilities like Log4j often dominate headlines, but the reality is that targeted malware attacks are becoming more prevalent. A study revealed that malicious attacks are nearly doubling compared to those exploiting known vulnerabilities. The Salsa framework offers a tiered approach to enhancing software supply chain security, emphasizing that vulnerabilities are just one of many attack vectors to consider.