Codesmith's flagship open source project compromised, thousands at risk

deepwoodssec.com