Comment by herpdyderp

I was always confused at why people claimed trusted publishing would make any difference to this kind of supply chain attack.