Are you sure you are pinned to a “known good” version?

No one initially knows how much is compromised