Supply chain attacks against open source is getting worse | Hacker News Reader