Get ready for more of these type of attacks as time goes by, and they won't all be as obvious as this one. Supply chain attacks are increasingly being seen as

Get ready for more of these type of attacks as time goes by, and they won't all be as obvious as this one. Supply chain attacks are increasingly being seen as a good vector and there are thousands of unmaintianed Open source libraries buried in the dependencies of popular projects. Also worth noting that package security solutions, which check for known vulnerabilities, are unlikely to solve this kind of problem unless they track "known good" package versions and alert when things change.