looks like LLMs aren't mature enough yet to play long-game xz-style attacks without detection... Scary stuff though :( These supply chain attacks are getting really wild

I wouldn’t jump to that conclusion. This could just be the one that was caught.

Some certainly are, just not this one.