Terrible headline makes it sound like the open-source-ness made the attack possible to occur instead of possible to be discovered. "Of course, as the vast majo

Terrible headline makes it sound like the open-source-ness made the attack possible to occur instead of possible to be discovered. "Of course, as the vast majority of the users of The Great Suspender were not interested in its open-source nature, few of them noticed until October, when the new maintainer made a perfectly ordinary release on the Chrome Web Store. Well, perfectly ordinary except for the minor details that the release did not match the contents of the Git repository, was not tagged on GitHub, and lacked a changelog."