Packagist packages hid malicious package.json scripts, enabling Linux binary execution during installs and workflows.

A lot of attacks on trans rights have been passing under the radar. The goal isn't to wrangle up public support but to harm ...