@strypey @nwalfield @rysiek Indeed it was an absurd overreaction, which was clear to me as my toolchain was unaffected by it. Of course it's still sensible to stop using compromised components until they're patched. In the same vein, it's a good idea to selectively stop sending email to exclusive platforms that reject RFC-compliant msgs on the sole basis of IP address. Emailing them is supporting them.