The GlassWorm supply-chain campaign has returned with a new, coordinated attack that targeted hundreds of packages, ...

More fun than it should be, honestly.

How can an extension change hands with no oversight?