Instant Thought: another open source supply chain attack

It seems not a day goes by without another open source supply chain attack. The latest, uncovered by the security researcher "JK&quo...