Hacker News new | ask | show | jobs
by ab5tract 804 days ago
The person who added the malicious blobs and signed the compromized archives was literally a maintainer of the project.