Dealing with (Hypothetical) Sham Packages | Dark Hacker News