From the originating report: > Since it was the first time such an attack was observed, we conducted a quick search across the open-source ecosystem. The resul

From the originating report: > Since it was the first time such an attack was observed, we conducted a quick search across the open-source ecosystem. The results were startling. We found numerous packages and repositories using abandoned S3 buckets that are susceptible to this exploitation. Neither OP nor the report mentions which other known compromised packages are. Does anyone know if they or anyone else published anything?