This is a good read. Short and to the point.

i want to say that Lasse Collin and Jia Tan clearly don't spend enough time touching grass, but i hope they never do. lol

Regarding Lasse Collin, technically he did eventually open a liberapay page where people can donate to him, though it's only at €60/week as of writing.

Super interesting, thanks!

Great read

Given what Jai Tan did, surely it would have been better if they'd done nothing /but/ touch grass, and stayed away from computers altogether?

(Whilst nobody knows for sure, it's possible JT was a state actor rather than an individual)

Very good read, subscribed to see what happens.

I think one generally has to assume that state actors are targeting open source projects for supply chain attacks.