Good writeup! Do you know whether the libraries in question were compromised, or were the compromised sites obtaining modified version of the libraries from som

Good writeup! Do you know whether the libraries in question were compromised, or were the compromised sites obtaining modified version of the libraries from some other source?