Comment by shreddit

It was discovered pretty quickly, i don’t think most “big” projects update their packages within minutes of publication.