Great, just what we needed, more reason to distrust the supply chain. I'm starting to think open source maintenance is just a euphemism for 'hacking playground'. https://www.techmeme.com/260521/p51#a260521p51