A arstechnica.com Open source package with 1M monthly downloads stole user credentials 6 points aureliusm 6 months ago 0 comments