Developer Sabotages Open-Source Software Package – Schneier on Security

https://www.schneier.com/blog/archives/2022/03/developer-sabotages-open-source-software-package.html