• @[email protected]
      link
      fedilink
      English
      12
      edit-2
      1 year ago

      Part of the payload was in the tarball. There was still a malicious shim in the upstream repo