It has been a busy week for supply-chain attacks targeting open source software available in public repositories, with ...

Maintainer, the package is, which is downloaded around 2.7 million times a week, was infected with a malware loader.