Sometime around the last week of May 2026, attackers uploaded poisoned packages to three of the most widely used software ...