That would likely mean same amount of people get the vulnerability, just 7 days later.
The compromised packages were removed from the registry within hours.
alt Hacker News
The compromised packages were removed from the registry within hours.