UNVERIFIEDSingle SourceHackers have compromised dozens of popular open source packages in an ongoing supply chain attackTechCrunch|5/19/2026