Bootstrap supply chain attack is another attempt to poison the barrel

Somebody smuggled something bad into the vast third-party, open-source supply chain we all depend upon.