I was checking one of my cybersecurity online rags and found this. I could not find any mention of it already having been posted here so I decided to submit. Shai-hulud again. Compromised one maintainer's account (keyv). Looks serious.