1 comment

[ 2.8 ms ] story [ 9.2 ms ] thread
They are not stealing the package. They are using it as a door into developer machines, CI, tokens, and customer systems.