@tgrex.eth
lol wuuuuut… this is as much as i know as of rn but this is crazy.
I hope all software developers understand how under prepared we are (as an industry) to skirt supply chain attacks. What can you do? Well for starters you can engage in practices like locking down your dependency graph with LavaMoat
https://lavamoat.github.io/