Static_Rocket, 3 months ago Part of the payload was in the tarball. There was still a malicious shim in the upstream repo
Part of the payload was in the tarball. There was still a malicious shim in the upstream repo