thinkingemoji··on Keyv and friends compromised in active Shai-Hulud supply chain attackNo way to prevent this says only package manager where this regularly happens