Will the list of affected packages expand? How were these specific packages compromised in the first place?
alt Hacker News