blueflow 10 months ago

I think this is an actual "supply chain attack", while the downloading-malware-from-github-automated isn't.