Post #1624421

@dalias @wwahammy @artemis This feels like an open-source supply chain attack. We have already seen it happen with state-sponsored actors putting exploitable bugs into Linux. The people doing this may be other state-sponsored actors, or sponsored by private companies.