"debug" package attack failed; malicious update detected early, minimal impact. Developers urged to check their installations ...