4 ms·

I think this is an actual "supply chain attack", while the downloading-malware-from-github-automated isn't.