I wonder how many other packages are going to be compromised due to this also. Like a network effect.