Scary! Package supply chain attacks are extremely dangerous and you cannot protect yourself if you don't read the install script of every package which is impossible.

Thanks for sharing this ☝️