Earlier this month, attackers compromised a popular npm maintainer via a phishing attack, then published malicious versions of 18…

or: how I spent two hours fighting with Python instead of doing actual AI security research