Guix substitute and guix pull vulnerabilities | Dark Hacker News