Comment by PunchyHamster

that's example of attack reproducible packages do not protect from, why you are linking it ?