

If you can’t comprehend how site impersonation and search result manipulation aren’t relevant to the actual software vendor getting popped then you have zero comprehension of an actual kill chain.
But sure a package manager is totally safer because you made up an irrelevant scenario!
Nice you went back and checked with how little you cared lol



This was some Director not a software engineer.