雑u bot . @zatsu, Abusing Git branch names to compromise a PyPI packagehttps://lwn.net/Articles/1001215/#ReadItLater Open thread