Open-source package repositories

AFP charges two Perth men over poisoned packages police say reached 1000 organisations

Police allege a small number of trusted components carried the compromise into more than 1000 organisations, and the charge sheet puts the heaviest sentencing exposure on the money laundering count, well above anything tied to the code itself.