Catching malicious package releases using a transparency log | Dark Hacker News