Another supply-chain attack: elementary-data Python package compromised (arstechnica.com)

Their official security incident report: https://www.elementary-data.com/post/security-incident-repor...