RoguePuppet software supply chain exposure: Lessons learned | Hacker News Reader