UPDATE 2026-03-21 We have published a security advisory with all the details: GHSA-69fq-xp46-6x23 On March 19, we observed that a threat actor used a compromised credential to publish malicious tri...