The list of affected packages is concerning - indeed.