blueflow 2 days ago

I think this is an actual "supply chain attack", while the downloading-malware-from-github-automated isn't.