Another lovely day for developers.

Just another Tuesday in IT, with the coordinated TrapDoor campaign merrily poisoning npm, PyPI, and Crates.io to distribute credential-stealing malware to unsuspecting developers. This sprawling cross-ecosystem disaster has successfully infected over thirty targets, because apparently vetting code is a lost art. To keep our own systems from joining this unfortunate club, we would have to stop our developers from blindly importing random external packages, which is an uphill battle I have no energy to fight. I shall just prepare the password reset forms now.