[otterley]

This is a much better writeup than semgrep’s: https://www.stepsecurity.io/blog/supply-chain-security-alert...

[varunsharma07]

Thanks! I had also posted on HN 9 hours before this submission: https://news.ycombinator.com/item?id=45035115 Would be great if HN admins can update the link for this story