Follow
Dozens more PyPI packages in ongoing Supply-Chain Attack
@lupyuen kinda reminded of the time microsoft tried to put that 'strong naming' thing in to .NET, which was something like including the signature of a library when you marked it as a dependency.
