Shai-Hulud: Whoever controls your package registry controls your pipeline

strong traces of ~~spice~~ slop