The Octopus Scanner Malware: Attacking the open source supply chain (securitylab.github.com)