Package Manager Threat Model, Revisited | Dark Hacker News