THIS NEW SUPPLY CHAIN ATTACK TECHNIQUE CAN TROJANIZE ALL YOUR CLI COMMANDS

Summary from the TLDR InfoSec newsletter

Open source ecosystems are vulnerable to supply chain attacks, with entry points being an often overlooked risk. Attackers can exploit this feature across multiple programming ecosystems to execute malicious code when specific commands are run using methods like command-jacking.