For seven days, I went all in and did not use any Google apps. I said I would stick entirely to free and open source software ...
The hackers compromised GitHub Action tags, then shifted to NPM, Docker Hub, VS Code, and PyPI, and teamed with Lapsus$.