It has been a busy week for supply-chain attacks targeting open source software available in public repositories, with ...