If the recent xz backdoor drama didn't induce enough paranoia in you, here is a second chance exception:
https://www.theregister.com/2024/04/16/xz_style_attacks_continue/ Open sourcerers say suspected xz-style attacks continue to target maintainers Social engineering patterns spotted across range of popular projects Tue 16 Apr 2024 // 14:07 UTC Open source groups are warning the community about a wave of ongoing attacks targeting project maintainers similar to those that led to the recent attempted backdooring of a core Linux library. -- You received this message because you are subscribed to the Google Groups "sage-devel" group. To unsubscribe from this group and stop receiving emails from it, send an email to sage-devel+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/sage-devel/CAGUWgD82%3DoROFFxZwrKZG6eB0Kd5GEKW8wrPw_Q4gm8WJjioCA%40mail.gmail.com.