yeah, it's just the beggining of this, you will see supply chain attacks will increase more than 100% just in 2022, in short whole internet is at risk,
it's time to think carefully and immediately start using services like Vulert(https://bit.ly/336DZub) that tracks your open-source softwares for free and notifies you in real-time if any seccurity issue is found within your applciation. it's free.
Let me know what's your thought on it.