This is a pretty low-value comment: attackers have been hosting malware on public indices since day 1; the more interesting observation here is that crates.io i

This is a pretty low-value comment: attackers have been hosting malware on public indices since day 1; the more interesting observation here is that crates.io is now "important" enough to get their attention for typosquatting.